h4xx0r1337
Attribution profile
- Type
- Activist
- Location
- Argentina
- Known incidents
- 2 incidents
- Sources
- 0 sources
- First seen
- 2024-12-23
- Last seen
- 2025-11-01
- Updated
- 2026-10-13 10:19
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
h4xx0r1337 is a threat actor operating from Argentina, known by that alias. The actor has targeted Argentine government entities, including the airport security police payroll system and the Mi Argentina citizen services platform. In the payroll breach, the actor exploited a vulnerability in the third‑party bank that processes the agency’s payroll to access personal and financial data and make small fraudulent salary deductions. In the Mi Argentina incident, the actor defaced the platform with political messages and a music video after causing server errors, altering visual elements in static sections. No malware families or specific tooling are described in the public reports; the observed tactics involve vulnerability exploitation leading to unauthorized access and defacement. Public attribution does not link the actor to any state sponsor or criminal consortium, and the reported activities are limited to financially motivated fraud and service disruption.
Incidents
Attributed incidents are available to members.
2 incidentsSources
Sources available to members: 0 sources.