CSIDB logo
Threat actor

R.I.U. Star Patrol

Attribution profile

Type
Sensationalist
Location
United States of America
Known incidents
1 incident
First seen
2016-12-21
Last seen
2016-12-21
Updated
2026-07-31 23:05
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

R.I.U. Star Patrol is a threat actor publicly identified by the alias R.I.U. Star Patrol. The actor is known to operate from the United States of America. The group first contacted Mashable on Twitter shortly before the Tumblr outage began on December 21, 2016. Through direct messages, the actor stated that the attack was carried out for light hearted fun. The actor explicitly said there was no sinister motive behind the action. The actor also retweeted user reactions to the service interruption as the event unfolded.

The target of the claimed attack was Tumblr, a social media platform headquartered in the United States. The incident caused Tumblr to experience a service disruption that lasted more than two hours. During the outage, the site intermittently regained partial functionality before going offline again. Full service was not restored until several hours after the initial failure. Tumblr’s official communication acknowledged latency issues but offered minimal public detail. Users expressed frustration on Twitter, with some humorously linking the outage to the Yuri on Ice anime finale. Tumblr responded that the outage was unrelated to the anime event.

The actor described the method as a large scale distributed denial of service attack. No specific malware families, exploit tools, or initial access vectors were disclosed in the reporting. The actor accurately predicted, via message to Mashable, the approximate time when Tumblr would return to full operation. Public sources have not linked R.I.U. Star Patrol to any state sponsor or criminal consortium. The Tumblr DDoS incident remains the sole publicly documented operation attributed to this alias. Consequently, the profile of R.I.U. Star Patrol is based exclusively on this single reported event.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB