Abdilo
Attribution profile
- Type
- Sensationalist
- Location
- Australia
- Known incidents
- 3 incidents
- Sources
- 2 sources
- First seen
- 2014-12-04
- Last seen
- 2015-02-02
- Updated
- 2026-10-17 07:11
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Abdilo is an online alias used by an individual who claims to be a teenager based in Queensland, Australia. The actor has exploited SQL injection vulnerabilities to breach systems, notably accessing the University of Sydney’s ORSEE recruitment database in February 2015 and exposing personal information of approximately 5,000 students. In December 2014, Abdilo claimed responsibility for an SQL injection attack on Australian travel insurer Aussie Travel Cover that exfiltrated over 770,000 customer records containing names, phone numbers, email addresses, travel dates and policy prices. The actor also asserted compromises of several government websites—including those of the Australian Communications and Media Authority, Victoria Police, the Australian Nuclear Science and Technology Organisation and the Australian Public Service Commission—but those organisations confirmed only public‑facing portals were accessed and no sensitive data was taken. Additional targeting extended to insurance and finance sectors, with Abdilo sending tweets to GIOInsurance and investsmart_au about SQLi vulnerabilities. No malware families or specific tooling beyond SQL injection are described in the sources, and no public attribution to a state sponsor or criminal consortium has been made.
Incidents
Attributed incidents are available to members.
3 incidentsSources
Sources available to members: 2 sources.