Anonymous Legion
Attribution profile
- Type
- Activist
- Location
- United States of America
- Known incidents
- 2 incidents
- Sources
- 1 source
- First seen
- 2016-06-22
- Last seen
- 2023-03-25
- Updated
- 2026-11-03 07:44
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor known as Anonymous Legion operates out of the United States of America and claims affiliation with the Anonymous hacker collective. The group has been associated with high-profile cyberattacks targeting public services and commercial infrastructure. In June 2016, the actor allegedly launched a distributed denial-of-service (DDoS) attack that took down the Minnesota Judicial Branch website, claiming to have penetrated court servers and stolen data, though no evidence was provided to substantiate the breach. In March 2023, the group was unofficially linked to a compromise of an Italian vending machine manufacturer's central server, which manipulated thousands of distributors to display political messages advocating for the release of an imprisoned anarchist and to sell products at heavily discounted prices. The actor's activities have also been tied to political initiatives, including the formation of The Humanity Party (THumP) in the United States to coordinate collective efforts in local politics and discourage uncoordinated DDoS attacks.
Incidents
Attributed incidents are available to members.
2 incidentsSources
Sources available to members: 1 source.