Indonesian Cyber Freedom

Profile narrative

The threat actor is known by the aliases Cyber Freedom and Indonesian Cyber Freedom. The actor operates from Indonesia. On April 5, 2015, the group defaced a subdomain of the United Nations Development Programme. The specific subdomain that was compromised belongs to the GEF Small Grants Programme. The attackers replaced the legitimate web page with a custom message they created. In addition to the message, they deployed a PHP shell on the compromised subdomain.

The defaced page displayed a message that included the exact phrase “Gotcha ! you got hacked by Indonesian cyber freedom”. A member of the group informed HackRead that the motivation for the attack was the perceived poor site security. The article provides a direct link to the compromised website at sgp.undp.org/xZ.php. It also supplies a Zone‑h mirror link as verification of the hack at http://zone-h.com/mirror/id/23997218. A full preview of the defacement page is included in the article for readers to view. The message left by the attackers serves as a signature claim of responsibility.

The defacement caused a temporary disruption to the affected subdomain while it remained under the hackers’ control. At the time of reporting, the compromised page continued to show the attackers’ message and PHP shell. The main United Nations website operations were not affected by this incident. The article notes that this is not the first occasion on which United Nations domains have been targeted. Historically, several UN sub‑domains and main websites have suffered similar defacements. The article offers a link for readers to examine previous hacks on United Nations infrastructure. The piece was published on HackRead on April 5, 2015. The source report identifier for the article is 6f2e6a57-7713-44ac-9440-a2260becb701 and its title is “Indonesian Hackers Deface Subdomain of United Nations Website”.

Incidents

Attributed incidents are available to members.

Sources

Sources available to members: 1 source.