Cyber Threat Actor: Essaji

Essaji is a Pakistani hacker who uses the alias Essaji and has been identified as a supporter of the hacker collective Anonymous. The actor came to public attention on August 25, 2014, when the official website of the city of Binghamton, New York, was altered. The defacement replaced the normal content with a message that read: "Hacked by Essaji! Hello Admin! Your security really sucks! Fix it or I'll come back! :-P Don't hate me hate your security! In Solidarity With GAZA. Pakistan Zindabaad!" This incident was reported by Hackread.com and later summarized in a MEMRI article.

The target was a municipal government website in the United States, placing the activity within the government sector and North American region. The defacement constituted a disruption of the site's normal service and displayed a political statement criticizing the site's security while expressing solidarity with Gaza and ending with a pro-Pakistan slogan. No reports indicate that the actor sought financial gain, conducted espionage, or caused damage beyond the public-facing alteration. The available sources do not describe any additional disruptive impacts such as data theft or service outage.

Regarding tactics, techniques, and procedures, the only observable action described in the sources is the unauthorized modification of the website's content; no malware families, exploit tools, or specific initial access vectors are mentioned. Essaji's stated affiliation is with the hacker group Anonymous, as noted in the MEMRI article, but no formal membership or hierarchical relationship is detailed. There is no publicly available evidence linking the actor to a state sponsor or to a criminal consortium. Consequently, the actor's technical footprint remains limited to the defacement incident itself.

The Binghamton website defacement stands as the sole publicly reported operation attributed to Essaji in the open-source record. In the defacement message, the actor explicitly referenced solidarity with Gaza and concluded with the phrase 'Pakistan Zindabaad,' indicating a nationalist political theme. No further campaigns, data breaches, or other incidents have been publicly associated with this alias. As a result, the threat actor's profile is defined primarily by this single act of website defacement.