SkyNetCentral

Profile narrative

SkyNetCentral is the alias used by a threat actor whose known location is Egypt. The actor has publicly identified itself through social media posts and has been linked to operations targeting Islamist political organizations and affiliated civil society groups. Public statements indicate that the actor’s strategic objective is ideological opposition, specifically framing targets as equivalent to extremist groups such as ISIS. No financial or espionage motives have been explicitly attributed to SkyNetCentral in the available sources.

The actor’s observed tactics include conducting distributed denial‑of‑service attacks that overwhelm web services despite protective measures such as CloudFlare, followed by exploiting vulnerabilities to bypass site security and exfiltrate database contents. In the June 2016 operation against the Muslim Brotherhood’s official website and the Freedom and Justice Party’s site, SkyNetCentral leaked internal data comprising commenters’ IP addresses, email exchanges, and names, asserting that only non‑sensitive information was accessed. The actor has also referenced targeting the Council on American‑Islamic Relations (CAIR) and similar organizations, suggesting a pattern of focusing on groups perceived as Islamist or advocacy‑oriented.

No public attribution to a state sponsor, criminal consortium, or other affiliations has been established for SkyNetCentral. The available evidence consists solely of the reported incidents and the actor’s own statements, which limit further conclusions about organizational ties or broader campaign scope. Consequently, the profile reflects only the confirmed facts: an Egypt‑based actor using the alias SkyNetCentral, employing DDoS and database breach techniques against Islamist‑linked entities, and citing ideological opposition as the motivation for its actions.

Incidents

Attributed incidents are available to members.