Cyber Threat Actor: i-Hmx
| Actor Type | Location | Known Incidents |
Sensationalist
|
Egypt
|
0 incidents |
|---|
Profile
i-Hmx is an alias used by an Egyptian hacker who gained public attention for defacing the HackForums website in August 2014. The defacement message displayed on the compromised site read “[403 Forbidden Error] - You might be blocked by your IP, Country, or ISP.” followed by a greeting that included the aliases H3ll C0D3, Egyptian.H4x0rZ and the crew designation ./Eg-R1z Cr3w, indicating that i-Hmx operated alongside these associates at the time of the incident. The article notes that the hacker exploited some unspecified flaw to gain access to the server, uploaded an image to the compromised host, and then displayed that image as the defaced page, causing the site to be unavailable for several hours before it was restored. No further details about the vulnerability, the tools used, or any malware families associated with the actor are provided in the source material.
The activity attributed to i-Hmx is limited to website defacement, which represents a disruption‑oriented tactic rather than financially motivated theft or espionage. The article does not specify any particular sectors or geographic targets beyond the HackForums platform, which is described as a global hacking community hosted in Europe. While the defacement message includes a reference to Egypt and the actor’s self‑identification as Egyptian, the text does not establish a state nexus, criminal consortium affiliation, or any broader campaign beyond this single incident. The piece also mentions that HackForums had previously been compromised by other actors such as imLulzPirate, b0x, SYRIAN‑HACKER and KTN, but it does not link i‑Hmx to those earlier events or to any subsequent operations.
Given the sparse publicly available information, the profile can only confirm that i‑Hmx is an Egyptian hacker known for participating in a web defacement of HackForums alongside identified associates, exploiting an unspecified server flaw to display a defacement image, and causing temporary service disruption. No additional details regarding motives, capabilities, affiliations, or other operations can be derived from the supplied source.
