Nightmare Squad

Profile narrative

The threat actor known as @NightmareSquad or Nightmare Squad operates under an alias that appears on social media platforms. The group has identified itself as being based in Brazil. Nightmare Squad describes itself as an Anonymous blackhat team fighting for the people of South America. Their public statements associate them with the broader Anonymous collective. No further details about their organizational structure or size are provided in the source material.

According to their own messaging, Nightmare Squad focuses its activities on entities in South America. They have announced via Twitter that they have conducted hacks against Brazilian government sites. Despite the stated regional focus, the group was responsible for a leak involving the University of Queensland in Australia. The leaked data consisted of nine individuals’ email addresses and clear‑text passwords. The origin of the data—whether obtained through hacking or discovered unsecured—was not clarified by the actors.

The source articles do not mention any specific malware families, exploit tools, or initial‑access vectors used by Nightmare Squad. Consequently, no particular TTP themes such as phishing, credential dumping, or ransomware can be attributed to the group based on the available information. The University of Queensland incident represents a notable publicly reported operation linked to the actor. In addition, the group’s claims of compromising Brazilian government sites constitute another referenced campaign, although details of those actions are not supplied. These two examples constitute the only concrete operations described in the source material.

Incidents

Attributed incidents are available to members.