Anonymous Catalonia
Attribution profile
- Type
- Activist
- Location
- Spain
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2018-08-26
- Last seen
- 2018-08-26
- Updated
- 2026-07-31 07:00
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Anonymous Catalonia is a hacktivist group known by that alias and operates primarily from Spain. The group uses the name Anonymous Catalonia to signal its affiliation with the broader Anonymous movement while focusing on Catalan issues. Public sources indicate the group’s location is Spain, though no further geographic detail is provided. It is recognized for conducting online protests that align with Catalan independence causes.
The group’s targeting has been directed at Spanish government institutions, including the central bank, the Constitutional Court, and the economy and foreign ministries. These targets are all located within Spain, reflecting a regional focus on national authorities. The observed objective of the attacks is disruption rather than financial gain or espionage, as the group seeks to make a political statement. Their actions are framed as part of the #OpCatalonia campaign protesting the detention of Catalan independence leaders.
Anonymous Catalonia’s typical tactic involves distributed denial‑of‑service attacks that overwhelm the public‑facing websites of their targets. The group announces the success of these operations on social media using the #TangoDown hashtag to signal a temporary takedown. Rather developing custom malware, they rely on rented DDoS infrastructure that is procured for a limited time. Once the rented resources are exhausted, the traffic ceases and the affected services return to normal operation.
No public attribution links the group to a state sponsor or a criminal consortium; it is described solely as a hacktivist collective. The most notable operation attributed to Anonymous Catalonia is the August 2018 DDoS campaign against Banco de España’s website, which was part of the broader #OpCatalonia effort. This incident exemplifies the group’s pattern of targeting Spanish government online presences to voice political dissent. The attack caused intermittent website inaccessibility but produced no lasting damage to the bank’s core functions.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.