Cyber Threat Actor: Fearz

Fearz, also knownby the handle @fearhax, is an individual associated with the hacking collective Crackas With Attitude (CWA) and is based in the United States of America. The actor first came to public attention through claims of involvement in the October 2015 compromise of CIA Director John Brennan’s AOL email account, an incident attributed to CWA. Fearz is described by fellow CWA members as an ex‑member of the group who continued to share information and collaborate on operations after the collective’s nominal disbandment. This affiliation places Fearz within a loose network of hacktivists that have targeted senior U.S. government officials.

The actor’s targeting pattern focuses on government, intelligence, and law enforcement sectors within the United States, with objectives that appear to be disruptive and politically motivated rather than financial. Evidence shows that Fearz obtained credentials through spear‑phishing the spouse of White House science advisor John Holdren, allowing access to a Comcast Xfinity account and the forwarding of Holdren’s home telephone calls to the Free Palestine Movement. The same group previously accessed the personal email of CIA Director Brennan and claimed to have harvested data from law enforcement databases, later publishing the names of more than two thousand U.S. law enforcement officers. Statements made by associated CWA members, including anti‑Israel rhetoric, indicate a political agenda aimed at exposing sensitive information and advancing a cause.

Typical tactics, techniques, and procedures employed by Fearz involve social engineering and credential harvesting rather than the deployment of malware. The actor used impersonation in phishing emails to trick a victim’s spouse into revealing login details for a shared internet service, a method that enabled subsequent account takeover and call redirection. No specific malware families or custom tooling are referenced in the available sources; the emphasis is on leveraging compromised legitimate services and publicly available information. The actor also demonstrated the ability to reuse data obtained from earlier breaches, such as law enforcement contact lists, to facilitate further intrusions.

Notable operations linked to Fearz include the 2015 breach of CIA Director John Brennan’s email, the 2016 intrusion into the personal accounts of White House advisor John Holdren, and the broader campaign that exposed law enforcement personnel data across multiple agencies. These actions contributed to federal investigations and prompted warnings about the risk of doxing by hacktivist groups. The actor’s activities illustrate a pattern of using credential phishing and database exploitation to achieve disruption and publicity for political statements.