Nepal Cyber Army
Attribution profile
- Type
- Activist
- Location
- Nepal
- Known incidents
- 1 incident
- Sources
- 1 source
- First seen
- 2015-08-17
- Last seen
- 2015-08-17
- Updated
- 2026-10-11 23:39
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The Nepal Cyber Army, also referenced as the Avian group, is a threat actor based in Nepal. It has targeted Nepali government web properties, specifically defacing the Kathmandu Valley Town Development Committee website and claiming unauthorized access to the Department of Transportation server. The actor’s stated purpose in the August 17 2015 incident was to pressure political leaders—including Puspa Kamal Dahal, Baburam Bhattrai, Hishila Yami and Sujata Koirala—to cease organizing strikes by threatening to disclose their bank details. Its tactics involved website defacement and asserting server access, with no referenced malware families, specific tools, or detailed initial‑access vectors described in the source material. No public attribution to a state sponsor or criminal consortium has been made. The most notable publicly reported operation is the August 17 2015 defacement of the Kathmandu Valley Town Development Committee site, accompanied by the warnings to the aforementioned leaders.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 1 source.