Anonymous
Attribution profile
- Type
- Activist
- Location
- Italy
- Known incidents
- 31 incidents
- Sources
- 0 sources
- First seen
- 2019-11-05
- Last seen
- 2023-10-06
- Updated
- 2026-10-13 00:05
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Anonymous is a hacktivist collective also known by the alias Anonymous, with reported activity linked to Italy. The group has targeted government bodies (such as the Câmara Municipal de Salvador in Brazil and the Kamchatka Legislative Assembly in Russia), critical infrastructure (including an Italian vending‑machine manufacturer, a Russian alcohol distribution system, and a Russian customs broker handling fuel and energy exports), research institutions (the Polar Branch of PINRO in Russia), and media outlets (Lithuanian media). Their activities have resulted in service outages, financial losses from unauthorized sales, and the exfiltration and leakage of internal emails via DDoSecrets, often accompanied by political messages advocating specific causes. Observed tactics include DDoS attacks, exploitation of misconfigured Docker installations through exposed APIs to hijack computational resources for amplification, and compromise of central servers to manipulate device behavior or steal data. No formal state sponsorship or criminal‑consortium affiliation is publicly attributed to Anonymous in the supplied sources; the group is described as part of hacktivist efforts such as the #OpRussia campaign and anarchist‑aligned online activity. Representative operations include the 2023 vending‑machine server compromise in Italy, the 2022‑2023 #OpRussia data leaks and DDoS actions against Russian governmental and critical‑infrastructure targets, and the 2023 attempt against the Salvador municipal portal.
Incidents
Attributed incidents are available to members.
31 incidentsSources
Sources available to members: 0 sources.