CSIDB logo
Threat actor

3xp1r3 Cyber Army

Attribution profile

Type
Activist
Location
Bangladesh
Known incidents
1 incident
First seen
2015-02-02
Last seen
2015-02-02
Updated
2026-07-31 20:30
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

3xp1r3 Cyber Army is a hacker group that operates under the alias 3xp1r3 Cyber Army and is publicly associated with Bangladesh. The group has been identified in open‑source reporting as responsible for a website defacement incident targeting a United States military subdomain. No further details about the group’s size, structure, funding, or broader activity are provided in the available sources. The alias appears consistently across the referenced article and related mirrors, establishing it as the primary identifier for this actor in the documented case. The group’s geographic origin is noted as Bangladesh, which is the only location explicitly mentioned in the context.

On February 2 2015, 3xp1r3 Cyber Army compromised and defaced the sub‑domain ems.azdema.gov, which belongs to the Arizona Army National Guard’s Environmental Division. This sub‑domain is part of the Arizona Department of Emergency and Military Affairs (DEMA), an organization that includes the Army and Air National Guard, the Division of Emergency Management, and the Joint Programs Division. The attackers replaced the site’s content with a message that read “3xp1r3 Cyber Army, We never give up! HACKED! Dear Admin, The security of your site is too low. Secure it! GreeTs To My beloved brothers of 3xp1r3 Cyber Army.” Proof of the compromise was shared via a mirror on zone‑h.org (ID 23652867) and a direct link to the affected domain. At the time of the article’s publication on February 6 2015, the defaced sub‑domain displayed an HTTP 403 error, indicating it was temporarily inaccessible. The article cites a source report ID 856aa6a5-0776-458a-9c5a-7489648831ae and provides the URLs used by the attackers for verification. No additional campaigns, malware families, initial access vectors, or affiliations are described in the supplied material.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB