Cyber Threat Actor: Hooded Men

Hooded Men isan alias used by a suspected hacking group that has been linked to cyber incidents in Kenya. The group’s location is identified as Kenya based on the geographic focus of its known activities. In January 2015, Hooded Men were suspected of hijacking the signal of a Christian radio station in the country, broadcasting Islamic verses before the station went off‑air for approximately three hours. This radio station hijacking followed a earlier cyberattack on a Kenyan newspaper’s website that had reprinted controversial cartoons depicting the Prophet Muhammad, an act that provoked outrage among Muslim readers. Government cyber‑crime experts confirmed the signal hijacking and initiated an investigation into the incident. The radio station had previously been targeted in a fatal petrol‑bomb attack, indicating a history of hostility toward the outlet.

The observed activities of Hooded Men involve targeting media outlets within Kenya, specifically using signal hijacking to alter broadcast content and conducting website attacks to deface or disrupt online platforms. No malware families, initial access vectors, or specific tooling styles have been publicly documented in relation to this group. Public sources do not establish any state affiliation, criminal consortium, or broader organizational structure for Hooded Men. Beyond the 2015 radio station hijacking and the associated newspaper website incident, no additional campaigns or operations have been openly attributed to the alias. The available information remains limited to these confirmed events, and further details about the group’s capabilities, size, or ongoing activities are not present in the referenced material.