Union of Hacktivists

Profile narrative

The threat actor known as the Union of Hacktivists also operates under the aliases The Hackers Union and UOH. Public reporting associates the group with Myanmar, though no precise headquarters location has been confirmed. The actor first came to public attention in mid‑2016 after a cyber intrusion against Eleven Media Group. The group describes itself as a collective conducting a 100‑day project targeting media outlets that criticize governmental reforms. The group’s Facebook page served as the main channel for claiming responsibility and broadcasting its political messages.

The group’s activity has been directed at online media outlets that publish criticism of the government’s reforms, indicating a focus on the information sector within Myanmar. Their stated aim, as communicated via a Facebook page, was to support the new government while disrupting the targeted outlet’s operations. The intrusion resulted in defacement of the website, loss of data, interruption of services, and a consequent decline in advertising revenue for the victim. The attackers posted messages in favor of the new government on the compromised platform as part of their claimed campaign. No specific malware families or initial‑access vectors were disclosed in the public reports concerning this incident.

A separate analysis from the Blink Hacker Group suggested that the Union of Hacktivists might be an undercover entity operating from military premises, although this linkage remains unverified in open sources. The actor was subsequently charged under Section 55(d) of Myanmar’s Telecommunications Law following a criminal complaint filed by Eleven Media Group on June 23 2016. Public statements indicated that the charge was lodged against the collective as a whole, with no individuals identified or prosecuted at that time. The June 2016 attack on Eleven Media Group remains the most clearly documented operation attributed to the Union of Hacktivists. This case illustrates the group's use of website defacement and political messaging as its primary tactics against perceived critics of the state.

Incidents

Attributed incidents are available to members.