Cyber Threat Actor: Anti WMD Team

Anti WMD Team isthe alias used for a threat actor that has been publicly linked to Iran in available reporting. The actor came to prominence following a cyberattack against Las Vegas Sands Corp on February 10 2014, which was attributed to this group in open‑source sources. No additional aliases or alternative location details are provided in the material.

The February 2014 incident targeted the Venetian casino on the Las Vegas Strip, causing computers to flatline, email and telephone services to fail, and multiple technology systems to shut down. Engineers observed a cascading IT catastrophe in which numerous servers and personal computers powered off, and many hard drives were wiped clean, erasing data and crippling the company’s technical infrastructure. The attack overwhelmed the organization’s incident‑response teams, who had not previously encountered such a widespread and destructive disruption. No specific malware families, initial‑access vectors, or tooling techniques are described in the source material.

Based on the sole publicly reported operation, Anti WMD Team has been observed focusing on the gaming/casino sector within the United States, specifically targeting a major Las Vegas‑based enterprise. The attack’s effects—systemwide outages and deliberate hard‑drive wiping—demonstrate a capability to cause significant operational disruption and data destruction. No further campaigns, sectors, or geographic patterns are documented in the provided information.