Hijacking of Israeli television satellite broadcasting with muezzin audio (November 2016)
What happened
During an evening broadcast in late November 2016, satellite distribution of Israeli television channels was taken over and replaced with the muezzin's call to prayer, accompanied by on-screen Hebrew text on the theme of divine retribution. Reporting places the affected viewers in northern Israel and in predominantly Arab communities, and states that a preliminary investigation found the intruders had taken control of the network's satellite broadcasting rather than its terrestrial distribution. Motive is attributed in the reporting to the muezzin bill then before the Knesset, a measure to restrict the use of loudspeakers for calls to prayer. The perpetrators are described only as appearing to be from Saudi Arabia, an attribution no retrieved source substantiates, and the mechanism is not described by any source: no uplink, transponder, teleport or compromise path is named.
HELD, not recommended for import as it stands. The brief that requested this record dates the incident to 2017; SPARTA's single cited source, a Jerusalem Post article, is dated 29 November 2016 and independent same-week coverage is also November 2016, so this record follows the source. If a separate 2017 incident of the same kind exists, this is the wrong record for it and a second is needed. Two further weaknesses: the mechanism is entirely unreported, so taking control of the satellite broadcasting is a conclusion rather than a description and is equally consistent with compromise of the broadcaster's own playout chain; and the attribution to Saudi actors is carried with a hedge and is substantiated nowhere.
Attack vector
Not established. Reporting states only that control of the broadcaster's satellite distribution was taken; no source names an uplink, a transponder, or a compromise path.
Operational impact
Substituted audio and on-screen text in place of scheduled programming for satellite viewers in northern Israel and predominantly Arab communities. Extent and duration are not quantified by any retrieved source.
Affected segments
link, user
Disclosed
2016-11-29
SPARTA techniques evidenced
Each row is a technique this record evidences, with the reasoning and the source that attests to it.
What relationship, confidence, and evidence mean on the rows below
- Relationship
What kind of link this is between the technique and the target.
Mitigates: the target actively prevents, detects, or recovers from the technique.
Addresses: the target governs the technique or is relevant to it, without interdicting it. Most governance and policy obligations sit here.
Triggers obligation: the technique occurring is what triggers the duty the target imposes.
Relates to: related to the technique, but the target neither interdicts nor governs it. Used sparingly.
- Confidence
How strongly the source supports this mapping, not how severe the technique is.
High: the source supports the mapping squarely.
Moderate: supported, with a qualification such as a cross-tactic reading that stays operationally sound.
Low: the source reaches the technique only in part.
- Evidence
How close to the source text the mapping was made.
Direct: a verbatim excerpt of the cited source was read against the technique, and the rationale argues from that excerpt.
Derived: the mapping follows from the source's scope or structure, with no on-point excerpt addressing the technique.
Inferred: reached by composition through another framework, or by domain reasoning the source does not support on its face.
Scheduled programming was replaced with substituted audio and on-screen text for the affected viewers. Loss of service to the intended audience is what the reporting describes rather than infers. Held at moderate because neither the extent nor the duration is quantified by any source retrieved.
Considered and not mapped
These techniques were considered for this record because a source, a related record or SPARTA's own catalogue pointed at them. Each was read against what the sources say and not mapped. The reason is given in full.
Founder ruling 2026-08-05, editorial question 3 (
docs/decisions.mdentry 73).EX-0012.06sits underEX-0012Modify On-Board Values. An interfering uplink displaced a legitimate carrier at a bent-pipe transponder and no source establishes that anything on board was modified. That is theSI-7stored-versus-transient boundary already codified inCLAUDE.md, applied to a technique rather than a control. Held atlowconfidence pending this question. The question is now answered against the edge, which is stronger ground than the confidence hedge was.Accepted for Sinosat and Captain Midnight because the sources there describe carrier contention; nothing of the kind is described here.
No source describes an uplink, a station, or any transmission by the intruders. The phrase "took control of the satellite broadcasting" is equally consistent with compromise of the broadcaster's own playout or uplink chain. Mapping a rogue station would invent the mechanism.
The substituted content was self-evidently not the broadcaster's. No viewer was misled about what they were seeing.
Sources
The published accounts this record rests on. The tier is SafeMode Space's own assessment of the source, and the reason for it is given beside it. What the tiers mean and how they are assigned: the source tiers.
A source is listed when a mapped technique rests on it, or when it disputes the account. One the curators read but neither cited nor recorded as disputing the record is not listed, so an absence here means neither is true rather than that nobody looked.
Tier 2: Reporting by an established national newspaper, bylined, on a domestic event. Thin on mechanism, and the attribution it carries is hedged. This is the source of the date discrepancy with the brief.
Every source SafeMode Space reproduces, and on what terms: sources and attribution.