Hanom1960

Profile narrative

Hanom1960, also known as hanomlulzsec, is a threat actor whose location has been noted as Uganda in open source reporting. The individual uses the alias Hanom1960 on Twitter and has been associated with both the LulzSec movement and Anonymous collectives. Publicly available sources describe the actor as participating in hacktivist operations that are framed as exposing corruption and advocating for policy change. No state sponsorship or criminal consortium affiliation is explicitly stated in the material provided.

The actor’s targeting has focused on government institutions in Latin America and Africa, including military email servers, ministries of finance, and ministries of foreign affairs. Reported operations cite the strategic objective of highlighting institutional corruption and pressuring authorities to reject specific trade agreements or improve security practices. In the Bolivian Army incident the hackers said they were motivated by rampant corruption within the institution, while the Costa Rican breach was presented as part of the #OpPuraVida campaign opposing the Central America Free Trade Agreement on labor and human rights grounds. The African actions were carried out under the #OpAfrica initiative, which the actor described as a campaign against corruption affecting multiple nations. These statements indicate that the actor’s goals are primarily demonstrative and aimed at influencing public perception or policy rather than financial gain or espionage.

Technical details referenced in the reports include the use of a known Zimbra exploit combined with weak server configurations to gain initial access to the Bolivian Army’s email system. In the African incidents the actor is described as compromising backend systems of telecommunications and government services to extract employee data, internal communications and hashed passwords. No specific malware families or custom tooling are mentioned; the actor relies on publicly known vulnerabilities and poor security configurations. The actor also leverages social media platforms such as Twitter to claim responsibility, share leaked data and announce affiliations with LulzSec and Anonymous.

Representative campaigns attributed to Hanom1960 include the February 2016 breach of the Bolivian Army’s email servers conducted alongside the Chilean Hackers crew and Hazzard, the February 2016 intrusion into Uganda’s Ministry of Finance as part of the #OpAfrica effort, and the January 2016 leak of data from Costa Rica’s Ministry of Foreign Affairs and Worship under the #OpPuraVida banner. Each operation involved the exfiltration of personal information, email correspondence and credential hashes, which were subsequently posted online to substantiate the actor’s claims of exposing systemic weaknesses. The actor’s public statements consistently link these actions to broader hacktivist motives centered on anti‑corruption and anti‑trade‑agenda advocacy.

Incidents

Attributed incidents are available to members.

Sources

Sources available to members: 3 sources.