Lizard Squad
Attribution profile
- Type
- Criminal
- Location
- Russia
- Known incidents
- 21 incidents
- Sources
- 12 sources
- First seen
- 2014-09-23
- Last seen
- 2019-11-11
- Updated
- 2026-10-13 04:46
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Lizard Squad, also known as Lizard Squad, is a hacking group linked to Russia that has conducted distributed denial‑of‑service attacks against gaming platforms such as Blizzard’s Battle.net, Xbox Live, PlayStation Network, and Daybreak Games, as well as against UK political parties, the UK National Crime Agency, and domain registrars to hijack Google Vietnam and Lenovo.com. The group’s activities involve disruptive DDoS attacks and the promotion of its Lizard Stresser DDoS‑for‑hire service, often claimed via social media. Observed tactics include using stresser/booter tools to flood targets, exploiting command injection flaws in registrars to upload rootkits and alter DNS records, and leveraging IPv6 addresses for domain hijacking. No public sources attribute the group to a state sponsor or identify a broader criminal consortium, though individual members such as AppleJ4ck, Julius “Zeekill” Kivimaki, Ryan King and Rory Andrew Godfrey have been named in reporting. Notable operations include the 2019 back‑to‑back DDoS attacks on the UK Labour and Conservative parties, the 2016 Blizzard Battle.net outages, the 2015 domain hijack of google.com.vn and Lenovo.com, and the 2015 DDoS against the UK National Crime Agency.
Incidents
Attributed incidents are available to members.
21 incidentsSources
Sources available to members: 12 sources.