Threatsec

ThreatSec is a prominent threat actor, or hacking team, known for its malicious cyber activities. It's part of a larger network that includes other hacktivist groups such as GhostSec, Stormous, Blackforums, and SiegedSec, collectively referred to as the modern-day Five Families group. This coalition engages in a range of cybercriminal activities, including denial-of-service (DoS) attacks, ransomware attacks, and extensive hacking campaigns. The group also has connections with newer entities like KittenSec, which acknowledges its ties with ThreatSec and others. In November 2023, ThreatSec made headlines when it claimed to have gained full control over the IP routing for more than 5,000 servers in the Gaza region. This represented a significant escalation in the group's activities and demonstrated its advanced capabilities. Among the group's notable targets was Alfanet, an internet service provider based in the Gaza Strip. ThreatSec's attack on Alfanet resulted in the shutdown of literally every server owned by the ISP, thereby causing widespread disruption. The attack on Alfanet was independently verified by Doug Madory from monitoring firm Kentik, who confirmed the inaccessibility of Alfanet's services following ThreatSec's claim. Some services remained offline even after the initial report, underlining the severity and impact of the attack. While ThreatSec is known for its anti-oppression stance, its actions have significant consequences, often resulting in widespread service disruptions and potential security risks. As such, it remains a subject of intense focus within cybersecurity circles.