Menu
Browse

Cyber Threat Actor: Nightmare Squad

Aliases: 2 aliases
Actor Type Location Known Incidents
 Icon
Activist
Brazil
1 incident
Profile

Nightmare Squad,also known by the Twitter handle @NightmareSquad, is a hacktivist group that has publicly identified itself as an Anonymous-affiliated blackhat team operating from Brazil. The group describes its mission as fighting for the people of South America, a statement it has made on its social media profiles. Its aliases and location are the only confirmed biographical details available in open sources. Nightmare Squad presents itself as a collective rather than an individual actor, aligning with the loose structure of Anonymous movements. No public evidence links the group to any state sponsor or formal criminal consortium.

The most thoroughly documented activity attributed to Nightmare Squad is the July 24 2015 leak of login credentials from the University of Queensland, in which nine email addresses and clear‑text passwords were posted online. In the associated article, the group claimed responsibility for the breach while noting that it remained unclear whether the data was obtained through hacking or discovered unsecured. The article, published on DataBreaches.net on July 25 2015, noted that the university had not acknowledged the incident despite being contacted through multiple channels. Nightmare Squad has also announced, via its Twitter account, a series of hacks against Brazilian government sites, though those claims are not accompanied by technical details or proof. The group’s Twitter account was used to communicate its claims, and a reporter’s inquiry about the motivation for targeting an Australian institution went unanswered. The actors did not disclose any specific malware families, exploit tools, or initial‑access vectors in connection with either the Queensland incident or the alleged Brazilian operations. Consequently, the profile of their tactics, techniques, and procedures remains undefined in the public record. The group’s stated objective of advocating for South‑American populations frames its actions within a hacktivist rather than financially motivated context.

Incidents
Attributed incidents available to members
1 incident
Sources
Sources available to members
1 source