Motivation: Ideological / hacktivist; Notoriety
Known since ~2011 for high-profile website defacements via DNS hijacking and SQL injection, including The Telegraph, The Register, Vodafone, and National Geographic. Its signature DNS-redelegation attacks affected 100+ sites; also defaced the Syrian Electronic Army site.
Signature DNS-redelegation attacks affecting 100+ sites; also defaced the Syrian Electronic Army site.
Attribution draws on public threat-intelligence reporting · Actor-claimed + sample. Primary source →
Check your exposure privately, or request a tailored exposure audit.