Cyber Threat Actor: Union of Hacktivists

The Union ofHacktivists, also known as The Hackers Union, is a threat actor that has been linked to Myanmar. Public reporting identifies the group as operating from within the country and using the aliases interchangeably in its communications and claims of responsibility. The actor’s known activities have focused on the media sector, specifically targeting online news outlets that publish content critical of governmental reforms. Statements attributed to the group indicate that its actions are intended as retaliation for perceived criticism and to demonstrate support for the new government’s agenda.

Observed tactics include website defacement that resulted in data loss, interruption of services, and loss of advertising revenue for the targeted outlet. The group announced its operation via a Facebook page, describing the attack as part of a 100‑day project aimed at the media organization for its critical coverage. In addition to the technical disruption, the actors posted messages in support of the new government on social media platforms, reinforcing the political nature of the campaign. No specific malware families, initial access vectors, or tooling details are described in the available sources.

A November 2015 report from the Blink Hacker Group alleges that the Union of Hacktivists may be an undercover organization operating from military premises, adopting the aesthetics of other local hacker groups to undermine online media. Following the June 2016 attack on Eleven Media Group, the outlet filed a criminal complaint that led to charges being brought against the hacking group under Section 55(d) of Myanmar’s Telecommunications Law. These elements constitute the publicly documented facts concerning the actor’s identity, targeting, observed effects, and legal response.