Anonymous Russia

Threat Actor Profile Updated 13 days ago
Download STIX
Preview STIX
Anonymous Russia, a malicious software (malware), has been associated with significant cyber-attacks, accounting for more than 30% of such incidents. This malware is affiliated with other hacktivist groups including Killnet, MIRAI, Venom, and has been involved in promoting Passion. Anonymous Russia, alongside pro-Russian groups like NoName057(16) and others, targeted Poland as well as individuals and organizations opposing the Russian invasion of Ukraine. The attacks included defacement and denial-of-service activities, causing substantial disruptions. The group amassed a following of 9,000 members but lagged significantly behind larger patriotic hacktivist groups. Despite this, its influence remained notable within the broader landscape of pro-Russia hacktivist entities such as Turla, XakNet, KillNet, NoName057(16), Anonymous Russia, and Cyber Army of Russia. However, the group experienced internal changes when Killnet announced the appointment of a new head for Anonymous Russia, named Radis, indicating shifts in its leadership structure. In recent developments, the original head of Anonymous Russia, Raty, was apprehended by Belarusian authorities after their identity was exposed by KillMilk, the leader of Killnet. Following this event, the original Telegram channel of Anonymous Russia was completely wiped and replaced by a new channel with the same name. Moreover, it was announced that the group would transform into a DDoS-for-hire entity, offering its services to any interested parties. This change signifies a shift in the group's modus operandi from primarily political motivations to a more commercial focus.
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Cyber Army of Russia
2
The "Cyber Army of Russia" is a collective of pro-Russia hacktivist groups, including Turla, XakNet, KillNet, NoName057(16), and Anonymous Russia. These groups utilize malware to exploit and damage systems, often infecting them via suspicious downloads, emails, or websites. Once inside a system, the
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Russia
Ddos
Telegram
Associated Malware
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Threat Actors
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
KillNetUnspecified
3
Killnet is a threat actor group, potentially aligned with the Russian government, that has been involved in various malicious cyber activities. The group is suspected to be a part of a broader network of nationalistic Russian "hacktivist" groups and ransomware operators, possibly encouraged by the R
KillmilkUnspecified
3
KillMilk, a threat actor and leader of the hacking group Killnet, has been identified as Nikolai Serafimov, a 30-year-old Russian citizen. KillMilk has been instrumental in consolidating Russian hacktivist groups under Killnet's leadership, amassing a following of 8,000 members on his personal Teleg
Associated Vulnerabilities
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Source Document References
Information about the Anonymous Russia Threat Actor was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
SourceCreatedAtTitle
CERT-EU
8 months ago
At least 23 Russian hacker groups targeted Ukraine in 2023, Ukraine’s cyber defense says
Flashpoint
a year ago
Killnet Ostracizes Leader of Anonymous Russia, Adding New Chapter to Pro-Kremlin Hacktivist Drama
BankInfoSecurity
3 months ago
Down, Not Out: Russian Hacktivists Claiming DDoS Disruptions
CERT-EU
a year ago
Cybercrime Front Lines in Russia-Ukraine War Move to Eastern and Northern Europe | #cybercrime | #infosec – National Cyber Security Consulting
CERT-EU
10 months ago
Killnet Tries Building Russian Hacktivist Clout With Media Stunts
BankInfoSecurity
8 months ago
Ukraine Cyber Defenders Prepare for Winter
Flashpoint
5 months ago
How Flashpoint Shaped the News in 2023: Data, Intelligence, and Domain Expertise
BankInfoSecurity
10 months ago
KillNet DDoS Attacks Further Moscow's Psychological Agenda
CERT-EU
a year ago
Hacktivism Unveiled, April 2023 Insights Into the Footprints of Hacktivists
CERT-EU
3 months ago
Down, Not Out: Russian Hacktivists Claiming DDoS Disruptions
BankInfoSecurity
7 months ago
Red Cross Tells Hacktivists: Stop Targeting Hospitals
BankInfoSecurity
9 months ago
Modern-Day Hacktivist Chaos: Who's Really Behind the Mask?
BankInfoSecurity
8 months ago
Canada Confirms DDoS Attack Disrupted Airport Arrival Kiosks