CoMoDo Islamic Hackers

Profile narrative

The threat actor known as CoMoDo, also referred to as CoMoDo Islamic Hackers, has been observed operating under those aliases in open‑source reporting. Public sources indicate that the group is based in the United States of America. The actor first came to attention in August 2014 when it claimed responsibility for a website defacement.

In that incident the actor targeted the United States‑facing website of the computer hardware manufacturer Plextor, replacing all pages with anti‑United States and anti‑Israel messages accompanied by Islamic propaganda. The defacement included Turkish language text and an embedded YouTube video that proclaimed a cyber war against nations perceived as disrespecting Islam. The attack rendered the original firmware downloads and support content inaccessible until Plextor regained control of the site.

No public reports detail the specific malware families, initial access vectors, or tooling employed by CoMoDo in this or any other operation. Consequently, the actor’s technical tactics, techniques, and procedures remain undocumented in the available open‑source record.

Attribution to any state sponsor, criminal consortium, or larger hacking collective has not been established in publicly available sources. The group’s affiliations and any possible nexus to governmental or criminal entities are therefore unknown based on current information.

The Plextor website defacement stands as the sole publicly reported campaign attributed to CoMoDo Islamic Hackers, representing the actor’s only known operation to date. No further incidents or campaigns have been linked to the alias in the sources consulted.

Incidents

Attributed incidents are available to members.