Hayalim Almonim
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Hayalim Almonim, also known as Anonymous Soldiers, is a hacking collective based in Israel that publicly identifies with the Antifa movement. The group describes itself as a loose network of activists opposed to neo‑Nazis, fascism, white supremacy and racism. Their stated goal is to strike terror into the hearts of the enemies of humanity and to dismantle fascist networks in the United States. They have claimed responsibility for operations intended to intimidate white supremacist organizations and to expose their members’ personal information.
The collective’s known activity involves breaching websites affiliated with Ku Klux Klan‑linked groups, extracting member data, and publishing it on social media platforms. In February 2021 they accessed the site of the Patriotic Brigade Knights, a KKK‑affiliated organization, and exfiltrated names, photographs, phone numbers and addresses of members, including the alleged leader. They defaced the compromised site with an anti‑racist banner reading “Shabbat Shalom! Goodnight white pride” and posted a link to the Texas Public Sex Offender Registry showing a senior member’s conviction for the sexual assault of a fourteen‑year‑old girl. The hackers also referenced a prior intrusion against the Church of the Ku Klux Klan, which they said operated in twenty‑five U.S. states, indicating a pattern of targeting extremist Christian‑aligned KKK entities. Their tactics consist of website intrusion, data scraping, public disclosure, and site defacement, without any mention of malware or custom tooling in the reported coverage.
Hayalim Almonim explicitly states that its actions are motivated by anti‑fascist ideology rather than financial gain or espionage, and it does not claim any state sponsorship or ties to criminal syndicates. The group has vowed to continue operations against fascist organizations, asserting that further actions will cause the “enemies of mankind to tremble with fear.” No additional details about their internal structure, funding, or technical capabilities are provided in the open sources. The profile therefore rests on the publicly reported attacks, the group’s self‑described affiliation with Antifa, and the stated ideological objectives.
Incidents
Attributed incidents are available to members.
3 incidents