Cyber Threat Actor: Black Maskers Army

Black Maskers Army is the aliasused by a hacker collective that has publicly identified itself with the pro‑Palestine moniker LulzSec Black in at least one reported operation. The group describes its actions as retaliation against states perceived to support Israel, framing its cyber activities as a form of political protest. No public statements have linked Black Maskers Army to a state sponsor or a formal criminal consortium, and its organizational structure remains undisclosed beyond the claims made in the incident reports.

On October 18 2024, Black Maskers Army claimed responsibility for a series of coordinated distributed denial‑of‑service attacks that targeted critical infrastructure and government services across the Republic of Cyprus. The assault focused on airport operations, banking systems, telecommunications providers, and government websites, aiming to disrupt normal functionality rather than exfiltrate data. According to official accounts, the DDoS traffic caused temporary slowdowns and occasional delays at security checkpoints while defensive measures were being upgraded, but most services were restored quickly and authorities confirmed that no data theft occurred. The attacks were characterized by the group as a show of force and a test of national defenses, a description echoed by Cypriot cybersecurity officials who noted the incidents served to probe the resilience of the country’s essential networks.

In the aftermath, Cypriot cybersecurity authorities maintained a heightened state of alert, emphasizing the importance of proactive monitoring and rapid response capabilities for critical infrastructure. They highlighted that while the October 18 campaign did not result in lasting damage or data loss, it underscored the need for continued investment in defensive technologies and incident‑response planning. To date, the Cyprus operation represents the sole publicly documented activity attributed to Black Maskers Army, and no further campaigns or additional tactics have been reported in open sources. The profile of the group therefore rests exclusively on the observed DDoS methodology, the stated pro‑Palestine political motivation, and the specific impact on Cyprus’s critical sectors as described in the available reporting.