Hacker Group ‘Dark Storm’ Claims X DDoS Attack: ‘Demonstration of Strength’

The Attack on X

Users across the globe reported difficulties accessing X, with issues ranging from login failures to complete outages. The disruptions began in the early hours of March 10 and continued intermittently throughout the day.

Cybersecurity experts quickly confirmed that the attack was a high-volume DDoS assault, overwhelming X’s servers with an immense flood of traffic.

Who is Dark Storm Team?

Shortly after the attack, Dark Storm Team took to their Telegram channel to claim responsibility, boasting that they had successfully taken down X.

According to cybersecurity firm Check Point, Dark Storm Team specializes in DDoS attacks and frequently provides "proof links" via third-party verification services like check-host.net to substantiate their claims.

Where Did the Attack Originate?

Elon Musk suggested that the attack originated from the "Ukraine area," raising speculation about potential geopolitical involvement. However, cybersecurity analysts warn against jumping to conclusions, as attackers often use compromised devices and proxy networks to disguise their true locations.

Shawn Edwards, chief security officer at network provider Zayo, explained:

"It's important to recognize that IP attribution alone is not conclusive. Attackers frequently use compromised devices, VPNs, or proxy networks to obfuscate their true origin."

This means the attack could have been launched from anywhere, making it difficult to determine whether Dark Storm Team acted alone or if other entities were involved.

How X Responded

In response, X deployed additional security measures, including Cloudflare’s DDoS protection services. Users attempting to log in during the attack encountered verification prompts to confirm they were not bots.

Despite these countermeasures, the scale and intensity of the attack caused significant downtime, with cybersecurity analysts observing multiple waves of attacks throughout the day.

A Growing Cybersecurity Threat

This attack underscores the vulnerability of even the most prominent digital platforms to sophisticated cyber threats.

Oded Vanunu, chief technologist at Check Point Software, noted:

"The resurgence of groups like Dark Storm Team highlights the growing threat against online platforms and critical infrastructures. For users, this means potential disruptions, downtime, and limited access to essential services."

According to Check Point’s 2025 Security Report, organizations worldwide faced an average of 1,673 cyberattacks per week in 2024, demonstrating the escalating nature of cyber threats.

Looking Ahead: What This Means for Cybersecurity

The X attack is part of a broader trend of increasing cyberattacks on critical infrastructure and major digital platforms. These attacks serve various purposes, including political statements, financial gain, and ideological motivations.

Dark Storm Team's pro-Palestinian stance and history of targeting geopolitical opponents suggest that their motives extend beyond mere disruption.

Moving forward, organizations must strengthen DDoS defenses, update security protocols, and conduct regular threat assessments.

As cyber threats continue to evolve, digital platforms, governments, and cybersecurity firms must remain vigilant to defend against increasingly sophisticated attacks.