World Hacker Team
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The World Hacker Team is a subdivision of the Anonymous hacktivist collective that has publicly identified itself with the #OpAfrica campaign. Members of the group describe themselves as hacktivists motivated by social causes rather than financial gain, stating that their actions aim to draw attention to child labor and government corruption in African countries. They have asserted affiliations with the broader Anonymous movement and have referenced connections to other hacker collectives, such as noting that the Hanom1960 actor claimed ties to LulzSec while participating in Anonymous operations.
The group’s publicly stated targeting focuses on government agencies, state‑owned enterprises and telecommunications providers across several African nations. Articles attribute their activities to Rwanda, Uganda, Tanzania, South Africa, Zimbabwe, Sudan, South Sudan and Ethiopia, with specific incidents involving Rwanda’s Broadband Systems Corporation, Uganda’s Ministry of Finance and Tanzania Telecommunications Company Limited. Their declared strategic objective is to highlight alleged corruption and labor abuses through the disclosure of internal data, rather than to pursue profit or espionage.
Observed tactics, techniques and procedures described in the sources include gaining access to backend systems, email accounts, ticketing systems and databases, then exfiltrating and publishing employee names, email addresses, telephone numbers, departmental affiliations, job titles, usernames and password hashes. In the Rwanda incident they accessed email accounts, ticketing systems and databases, leaking internal correspondence and hashed passwords. The Uganda Ministry of Finance breach involved the Hanom1960 actor obtaining data on 220 government employees, including names, emails and hashed passwords. The Tanzania Telecommunications Company Limited breach resulted in the release of personal details for over 64,000 purported employees, plus usernames and password hashes for site users. The group has claimed responsibility for these operations under the #OpAfrica banner.
Attribution information provided by the group itself links them to the Anonymous collective and identifies the World Hacker Team as one of its active subdivisions. No explicit state sponsorship or criminal consortium affiliation is mentioned in the source material; the group’s self‑description remains that of a hacktivist entity within the Anonymous movement. Notable campaigns referenced include the broader #OpAfrica initiative and the specific operations against Broadband Systems Corporation in Rwanda, the Ugandan Ministry of Finance via Hanom1960, and Tanzania Telecommunications Company Limited, all framed as efforts to expose alleged corruption and child labor concerns in the targeted countries.
Incidents
Attributed incidents are available to members.
5 incidents