Egyptian Cyber Army

Profile narrative

The threat actor is publicly referenced under the alias Egyptian Cyber Army. Open‑source reporting associates the actor with Egypt as its known location. A single attributed incident dated 2016‑04‑19 is listed in the actor’s incident overview. The summary for that incident explicitly states that the source article does not contain any information about a cybersecurity event involving Ain Shams University. The referenced source for the incident is a link to hacked‑emails.com that discusses Constella Intelligence services rather than a breach. The only article directly linked to the actor in the provided material describes a defacement of the Egyptian Ministry of Information website by a group calling itself the Libyan Cyber Army. That article does not attribute the action to Egyptian Cyber Army and instead credits Libyan hackers.

No publicly available sources describe the typical sectors or industries that Egyptian Cyber Army targets. Consequently, any inference about regional focus beyond the actor’s stated location cannot be drawn from the evidence. The actor’s strategic objectives—whether financial gain, espionage, disruption, or other motives—are not documented in any of the supplied references. Details regarding the actor’s preferred malware families, toolkits, or specific payloads are absent from the source material. Initial access vectors such as phishing, exploit kits, or credential theft have not been reported for this threat actor. No information is available about the actor’s tooling style, custom utilities, or reliance on publicly available hacking tools. Attribution to a state sponsor, criminal consortium, or any other organizational nexus has not been established in open‑source reporting. Likewise, no affiliations with known hacking collectives, forums, or underground markets are mentioned in the provided data. Consequently, no significant campaigns or publicly reported operations can be ascribed to Egyptian Cyber Army based on the current evidence. The absence of concrete technical or operational details prevents any characterization of the actor’s capabilities or activity patterns. All that can be affirmed from the supplied information is the alias Egyptian Cyber Army and its association with Egypt.

Incidents

Attributed incidents are available to members.