CSIDB logo
Threat actor

LulzSec Peru

Attribution profile

Type
Activist
Location
Peru
Known incidents
1 incident
First seen
2014-02-15
Last seen
2014-02-15
Updated
2026-07-31 07:37
Aliases
2 aliases

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

LulzSec Peru, also known as LulzSecPE, is a hacker group that has been publicly identified operating from Peru. The actor uses the aliases LulzSec Peru and LulzSecPE in its communications and claims of responsibility. Public reporting ties the group to a series of actions against political targets in the region, with the earliest documented activity dating back to at least 2012. The group’s location is noted as Peru, though no further details about its infrastructure or membership have been disclosed in open sources.

The group’s observed targeting focuses on governmental social media presences, specifically the verified Twitter account of Venezuela’s United Socialist Party. In the 2014 incident, LulzSec Peru seized control of the @PartidoPSUV account, altered its profile imagery and bio, and disseminated numerous anti‑government messages and retweets. This activity coincided with local protests and state‑imposed restrictions on Twitter image access, indicating a motive to disrupt official communication channels and amplify dissenting viewpoints. The earlier 2012 compromise of the same account demonstrates a repeated interest in the same target, suggesting a pattern of politically motivated disruption rather than financial gain or espionage.

The tactics, techniques, and procedures evident from the reported incidents involve social media account takeover, profile defacement, and the propagation of propaganda content. The actors changed the account’s pictures and description to assert ownership, then posted and retweeted content that opposed the government. No references to malware families, exploit kits, or specific initial access vectors such as phishing or credential dumping appear in the available sources, so the described TTPs are limited to account hijacking and information dissemination. The group’s tooling style, as far as publicly known, relies on leveraging compromised credentials to gain direct access to the target’s social media platform.

Notable campaigns attributed to LulzSec Peru include the February 2014 takeover of the United Socialist Party of Venezuela’s Twitter account and the prior November 2012 breach of the same account. Both operations resulted in the alteration of account assets and the spread of anti‑government messaging while the account remained under the group’s control at the time of reporting. These actions represent the group’s most visible and documented operations to date, illustrating a focus on political disruption through social media manipulation in the Latin American context.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB