CSIDB logo
Threat actor

Dark Overlord

Attribution profile

Type
Hacker
Location
United States of America
Known incidents
1 incident
First seen
2020-01-30
Last seen
2020-01-30
Updated
2026-08-01 19:22
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

Dark Overlord is an alias used by a cyber threat actor whose known location is the United States of America. The actor has been referenced in open‑source reporting under this name, and no other aliases have been publicly disclosed in the available material. No further biographical or organizational details about the actor are provided in the sources.

On January 30 2020, Dark Overlord was attributed to a breach of the Mountain View Los Altos High School district’s digital systems. The intrusion locked teachers and administrators out of their Microsoft accounts and, in some cases, prevented access to Gmail and the Aeries student information system. As a result, staff were forced to record attendance manually while district officials worked to restore access. The reporting explicitly stated that there was no known threat to student accounts at the time of the incident.

No additional campaigns, malware families, initial access vectors, or tooling have been publicly linked to Dark Overlord in the supplied information. Likewise, no state connections, criminal consortium affiliations, or clear strategic objectives such as financial gain, espionage, or disruption have been cited in the sources. Consequently, the profile is limited to the confirmed alias, geographic location, and the single documented incident involving a California school district.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB