Threat actor
RyanDa1338
Attribution profile
- Type
- Hacker
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2015-11-23
- Last seen
- 2015-11-23
- Updated
- 2026-10-13 01:59
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
RyanDa1338 is an alias used by a threat actor known to operate from Russia. On 23 November 2015 the actor compromised the Kenyan horticulture news site hortinews.co.ke, exfiltrating and publishing a database containing 42,065 usernames and their hashed passwords. This incident represents the only publicly reported operation attributed to RyanDa1338. The precise vulnerability or technique used to compromise hortinews.co.ke has not been publicly disclosed. No further details regarding malware, initial access vectors, affiliations, or strategic objectives have been disclosed in open sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.