Cyber Threat Actor: Vikings

The threat actor known by the alias Vikings has been publicly linked to an incident affecting an Australian media organization. According to open source reporting, the actor compromised the official Instagram account of SBS Australia on 26 July 2021. During the compromise, the actor replaced the account’s profile picture with an image of a masked figure. Additionally, the actor posted a promotional video that referenced the television series Vikings. SBS Australia regained control of the account, removed the unauthorized content, and issued a public acknowledgment of the breach. The exact method used to gain access to the Instagram account was not disclosed in the public reports. Nevertheless, the aftermath of the incident highlighted weak or reused passwords, phishing attempts, and insufficient multi‑factor authentication as possible avenues that could have been exploited. These points were presented as hypothetical weaknesses rather than confirmed facts about the actor’s tradecraft. The actor’s geographic association is noted as Australia, based on the context provided in the source material. No other identifiers such as real name, organizational affiliation, or sponsorship have been publicly attributed to the Vikings alias.

Because only a single incident has been publicly reported under this alias, there is no established pattern of targeting specific sectors or regions beyond the observed case. The available information does not allow a determination of the actor’s primary objectives, whether financial, espionage‑related, or disruptive in nature. Likewise, no specific malware families, toolkits, or consistent initial‑access vectors have been documented in connection with the Vikings alias. The absence of confirmed technical details means that any discussion of the actor’s tooling style remains speculative and is therefore omitted here. No public statements or investigations have linked the Vikings alias to a state‑sponsored program, a criminal consortium, or any other clearly defined affiliation. Consequently, the actor’s affiliations remain undetermined based on the presently available evidence. The SBS Instagram compromise stands as the sole representative operation that has been attributed to the Vikings alias in open sources. No additional campaigns, data leaks, or defacement events have been publicly tied to this actor at the time of writing. This profile therefore reflects only the facts that have been explicitly reported and avoids extrapolation beyond those details. Should further information emerge, it would be necessary to reassess the actor’s characteristics in light of the new evidence.