Cyber Threat Actor: maia arson crimew

The threat actor known publicly as Maia arson crimew operates under several aliases that have appeared in open‑source reporting and legal documents. These aliases include Tillie Kottmann, Tillie Kottman, the handle “crimew,” and the self‑described Twitter moniker “indicted, 23 years old and a ‘polyam trans lesbian anarchist kitten.’” A Wikipedia page exists for both the crimew alias and the Tillie Kottmann name, linking the various identifiers to the same individual. The actor’s age and personal identity descriptors were explicitly stated in the source material, noting the individual’s self‑identification as a polyam trans lesbian anarchist kitten at the age of twenty‑three. No additional biographical details such as nationality, residence, or organizational affiliation are provided in the source material.

According to the publicly available indictment referenced in the source, the actor was charged in the Western District of Washington with computer intrusion and identity and data theft. The indictment alleges that the actor, together with unnamed co‑conspirators, breached the networks of dozens of companies and government entities. The source does not specify particular industries, geographic regions, or the precise nature of the data taken, but it does characterize the alleged activity as involving unauthorized access and the exfiltration of identity‑related information. The actor’s stated objectives, as reflected in the charges, are therefore limited to computer intrusion and identity and data theft; no explicit motive such as financial gain, espionage, or disruption is disclosed in the source material.

Attribution details provided by the source include the location of the federal indictment—the United States District Court for the Western District of Washington—and a statement from the Associated Press quoted in the article indicating that, as of 2021, the actor did not expect extradition to the United States to occur in the near future. The actor’s self‑description as a polyam trans lesbian anarchist kitten is presented as a personal identifier rather than a motivational explanation. No connection to a state sponsor, criminal syndicate, or other organized group is mentioned in the source material, and therefore any assertion about affiliations would be speculative and is omitted.

The most concrete description of the actor’s operations comes from the indictment’s accusation that the individual and co‑conspirators compromised the networks of dozens of companies and government bodies. This allegation represents the primary publicly reported campaign associated with the threat actor. No specific malware families, exploit kits, or intrusion vectors are detailed in the source, so no technical tactics, techniques, or procedures can be reported. The profile concludes with the statement that the actor has been publicly indicted for computer intrusion and identity and data theft, accused of breaching dozens of companies and governments, and remains subject to ongoing legal proceedings.