g0retrance
Attribution profile
- Type
- Sensationalist
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2021-11-01
- Last seen
- 2021-11-01
- Updated
- 2026-10-14 13:39
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor known by the aliases g0retrance and netsaosa, reportedly based in Russia, compromised the Massachusetts Interscholastic Athletic Association website in November 2021 by defacing it with the term “pwned” and redirecting visitors to a Twitter account associated with g0retrance, leaving a message stating the action was harmless and intended to draw attention to perceived security flaws after alleged prior communications were ignored. This incident targeted a U.S.-based interscholastic sports organization and was described by the actor as an effort to expose vulnerabilities rather than for financial gain, espionage, or sustained disruption. No further details regarding malware, tooling, affiliations, or additional campaigns are publicly available in the provided sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.