Crash Override
Attribution profile
- Type
- Activist
- Location
- United States of America
- Known incidents
- 2 incidents
- Sources
- 1 source
- First seen
- 2016-11-05
- Last seen
- 2021-01-09
- Updated
- 2026-10-04 00:21
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Crash Override is a hacker alias used by an individual located in the United States. The actor has been linked to two publicly reported operations: a data‑collection effort against the right‑wing social media platform Parler and a website disruption targeting a Metropolitan Police news site in the United Kingdom. In the Parler case the actor identified an internal web address that allowed enumeration of all user‑generated content, organized a crowdsourced download of the data, and arranged for its subsequent archival on the Internet Archive for public access. In the 2016 Metropolitan Police incident, acting under the Anonymous banner, the actor claimed responsibility for an eight‑hour outage of a non‑operational section of the site, stating the action was retaliation for arrests made during an anti‑capitalist protest. The sources do not describe specific malware families, initial‑access vectors beyond web‑address enumeration, or particular tooling styles, and no state or criminal‑consortium affiliation is explicitly attributed to Crash Override.
Incidents
Attributed incidents are available to members.
2 incidentsSources
Sources available to members: 1 source.