Dark Overlord
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Dark Overlord is an alias used by a cyber threat actor whose known location is the United States of America. The actor has been referenced in open‑source reporting under this name, and no other aliases have been publicly disclosed in the available material. No further biographical or organizational details about the actor are provided in the sources.
On January 30 2020, Dark Overlord was attributed to a breach of the Mountain View Los Altos High School district’s digital systems. The intrusion locked teachers and administrators out of their Microsoft accounts and, in some cases, prevented access to Gmail and the Aeries student information system. As a result, staff were forced to record attendance manually while district officials worked to restore access. The reporting explicitly stated that there was no known threat to student accounts at the time of the incident.
No additional campaigns, malware families, initial access vectors, or tooling have been publicly linked to Dark Overlord in the supplied information. Likewise, no state connections, criminal consortium affiliations, or clear strategic objectives such as financial gain, espionage, or disruption have been cited in the sources. Consequently, the profile is limited to the confirmed alias, geographic location, and the single documented incident involving a California school district.
Incidents
Attributed incidents are available to members.
1 incident