The Knowns
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The Knowns is a hacker group that has been publicly identified by the alias “The Knowns” and is associated with Singapore-based activities. The group came to attention in September 2014 when it claimed responsibility for a data breach affecting a local karaoke chain. No further aliases or organizational structure have been disclosed in open sources. The group’s location is noted as Singapore, though no detailed information about its members or headquarters is available. Public reporting treats The Knowns as a distinct actor rather than a subset of a larger threat collective. Its activities to date have been limited to a single disclosed incident.
The Knowns targeted the entertainment sector, specifically a karaoke service provider operating in Singapore. The breach compromised membership records that included personal identifiers such as identity card numbers, contact details, dates of birth and marital status. The group stated that the disclosure was intended as a protest against a recent toll increase at the Woodlands Checkpoint. This indicates that the actor’s stated objective was to exert pressure or cause disruption rather than to pursue financial gain or espionage.
The Knowns’ tactics, as described in the reporting, involved exfiltrating the member database and subsequently publishing the data on multiple websites. The group also disseminated an email to several media outlets to publicize the leak and to explain its motivation. No specific malware families, exploit tools or initial access vectors were mentioned in the available sources. Attribution to any state sponsor, criminal syndicate or hacker collective has not been established in public reporting. The K Box incident remains the sole publicly documented operation attributed to The Knowns.
Incidents
Attributed incidents are available to members.
1 incident