Anonymous Sudan

Anonymous Sudan, a threat actor group known for its malicious activities, has been actively involved in promoting a new Distributed Denial of Service (DDoS) botnet service named “Skynet-GodzillaBotnet” as of February 26, 2024. The group is recognized for its previous DDoS attacks on the encrypted messaging service Telegram and Israeli organizations in 2023. Additionally, it launched an attack on the Jerusalem Post website and successfully took down the Cloudflare website. These actions have demonstrated the group's capabilities and intent to disrupt services and cause significant damage. The group has also reportedly advertised its InfraShutdown DDoS attack service during these attacks, encouraging other potential attackers to participate. This suggests that Anonymous Sudan may be deriving financial benefits from its hacktivism. Moreover, the group’s activity seemed to decrease as another entity named BlackMeta’s operations increased, leading to speculation that BlackMeta might be a rebranding effort by Anonymous Sudan. This group collaborated with the pro-Russian Killnet group in the past, further establishing its reputation. Similar to Anonymous Sudan, BlackMeta appears to be primarily motivated by pro-Palestinian ideology and exhibits an anti-Western stance. It also seems to have ties with Russia, as evidenced by its use of Arabic, English, and Russian in its posts. As such, both Anonymous Sudan and BlackMeta represent significant cybersecurity threats due to their capacity for launching large-scale DDoS attacks, their ideological motivations, and their potential links with other adversarial entities.