Network Battalion 65
Attribution profile
- Type
- Activist
- Location
- Russia
- Known incidents
- 8 incidents
- Sources
- 6 sources
- First seen
- 2022-02-20
- Last seen
- 2022-05-01
- Updated
- 2026-10-14 18:50
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Network Battalion 65 (NB65), also known as Network Battalion 65, is an Anonymous-affiliated hacktivist group linked to Russia. It has targeted Russian organizations across finance, energy, customs, media, military and government sectors, stating its aim is to disrupt Russian financial systems and propaganda as part of the OpRussia campaign. The group’s reported tactics include claiming to exfiltrate large volumes of data and leak them via DDoSecrets, asserting the use of ransomware to encrypt victim networks, and threatening to release stolen data daily unless contacted; it has also announced distributed denial‑of‑service actions and website defacements. NB65 presents itself as part of the broader Anonymous collective and has not been tied to any state sponsor or criminal consortium. Representative operations cited in open sources include the alleged breach of Qiwi payment processor (claimed exfiltration of 10.5 TB of data and leak of 7 million card details), the compromise of customs broker ALET (≈1.1 TB of emails leaked), and the hack of state broadcaster VGTRK (≈900 000 emails and 4 000 files released).
Incidents
Attributed incidents are available to members.
8 incidentsSources
Sources available to members: 6 sources.