Algerian Mujahideen

Profile narrative

The threat actor known as the Algerian Mujahideen has been identified primarily through a single incident in which they claimed responsibility for defacing a French‑based website. The group uses the alias Algerian Mujahideen and, according to the reporting, operates from France while asserting an Algerian identity. No additional aliases or organizational structure have been disclosed in publicly available sources.

The actor’s observed activity consists of a website defacement that replaced the homepage of the Air France National Personal Mutual (MNPAF) with a red and black screen displaying a political message. The message referenced the 1945 Setif and Guelma massacres, claimed to represent Algerian martyrs, and explicitly vowed to continue hacking French web servers. This indicates that the actor’s stated objective is political retaliation rather than financial gain or espionage, and the method employed was unauthorized alteration of a web page’s appearance. No malware families, phishing techniques, or specific tooling have been described in the available material, so the only confirmed tactic, technique, and procedure is web defacement.

Public sources do not establish any state sponsorship, criminal consortium, or broader affiliation for the Algerian Mujahideen; the group’s claims remain self‑attributed and unverified beyond the defacement incident. The Air France mutual society compromise on 29 March 2015 represents the sole publicly reported operation linked to this actor, with the victim confirming the intrusion was limited to the homepage, promptly taking the site offline with assistance from French cybersecurity authorities, and restoring functionality after an investigation by its external web host. No further campaigns or associated incidents have been documented in the referenced material.

Incidents

Attributed incidents are available to members.