Cyber Threat Actor: KingOfNoobs

KingOfNoobs is an alias used by the threat actor that publicly identified itself as Team Faceless Men during a 2018 website defacement. On July 27, 2018, the actor defaced a Kaiser Permanente‑related health innovations website. The defacement replaced the site’s legitimate content with a message and music that referenced the Game of Thrones series. Kaiser Permanente stated that no protected health information or internal systems were compromised because the affected subdomain was externally hosted and outside its core network. The organization remediated the incident by relocating the site and later implementing a redirect, asserting that the breach did not affect its core operations. Initial reports indicated that the website had not received routine security updates prior to the attack, which facilitated the defacement. The actors were described as individuals with gaming backgrounds and no notable hacking history at the time of the incident.

The defacement represents a disruptive tactic rather than a financially motivated or espionage‑driven operation, as the primary effect was the temporary alteration of the site’s public face. No specific malware families, exploit kits, or custom tooling were reported in connection with this incident; the attack relied on exploiting outdated software to gain unauthorized web‑server access. Public sources do not link KingOfNoobs or Team Faceless Men to any state‑sponsored program, criminal consortium, or broader hacking group. Consequently, no clear attribution to a geographic region, political motive, or financial network can be established from the available information. The incident was covered by security news outlets such as Databreaches.net, which highlighted the site’s lack of patching as a contributing factor. Despite the absence of data loss, the defacement raised concerns about third‑party security practices and their potential impact on organizational reputation. Aside from this single reported defacement, there are no additional publicly documented campaigns or operations attributed to KingOfNoobs or Team Faceless Men.