Cyber Threat Actor: Dr'SaMiM-008

Dr'SaMiM-008 is publicly associated with the pro-Islamic State hacktivist collective Anon Ghost, which claimed responsibility for a 2015 cyber intrusion targeting Malaysian law enforcement agencies. Operating under these aliases, the group demonstrated ideological motivations aligned with global jihadist movements, explicitly endorsing ISIS propaganda while rejecting associations with broader hacktivist collectives like Anonymous. Their activities centered on symbolic disruptions rather than financial theft or data exfiltration, emphasizing support for militant causes through digital defacement campaigns.

The actor primarily targeted government entities in Malaysia, focusing on social media infrastructure to amplify ideological messaging. During the July 2015 operation, they compromised official Facebook and Twitter accounts of the Malaysian Police, replacing profile imagery with Arabic text and ISIS-affiliated symbols. Attackers posted militant photographs, threats toward government officials, and declarations opposing Zionism and Israel, accompanied by the hashtag "#AnonGhost was here." Strategic objectives centered on psychological disruption and propaganda dissemination, with explicit claims that operations aimed to demonstrate technical capability and ideological solidarity rather than seeking personal notoriety. The group framed their actions as supporting international "freedom movements," though their output exclusively promoted ISIS narratives.

Technical execution involved unauthorized access to social media credentials, enabling defacement and content manipulation. While specific intrusion methods weren’t detailed, the operation showcased foundational web application targeting and an understanding of platform-specific administrative controls. No custom malware or advanced persistence mechanisms were referenced. Public communications revealed deliberate dissociation from non-aligned hacktivist groups while affirming exclusive loyalty to ISIS objectives. Malaysian authorities restored compromised accounts within hours, limiting operational impact to temporary service disruption and reputational damage. The incident remains their only publicly documented campaign, reflecting a narrow geographic and sectoral focus aligned with ISIS’s regional influence efforts.