Cyber Threat Actor: DDoSecrets
| Actor Type | Location | Known Incidents |
Activist
|
United States of America
|
1 incident |
|---|
Profile
DDoSecrets, alsoknown as Distributed Denial of Secrets, is a threat actor that has been identified as operating from the United States of America. The group is primarily recognized by its two aliases, which are used interchangeably in public reporting. Information about its organizational structure, size, or funding is not available in the source material. The actor’s location is noted as the United States, but no further geographic detail is provided.
The only publicly reported activity attributed to DDoSecrets involves the dissemination of data obtained from the Russian Orthodox Church’s charitable division in April 2022. In that incident, Anonymous exfiltrated approximately 15 gigabytes of data and 57,000 emails, which were then shared through the DDoSecrets platform. Access to the leaked material was limited to journalists and researchers because of its sensitive nature. This action took place within a broader campaign that targeted Russian government entities and businesses linked to oligarchs.
Source material does not describe any specific malware families, exploit tools, or initial access vectors associated with DDoSecrets. The actor’s observed role is limited to functioning as a repository and distribution channel for already‑exfiltrated information. No details are given about the use of custom tooling, automation, or particular techniques for gaining entry to victim networks. Consequently, any technical profile of the group’s tradecraft remains undocumented in the available references.
The April 2022 leak of the Russian Orthodox Church charitable division’s data stands as the most notable operation publicly linked to DDoSecrets. The release consisted of 15 gigabytes of files and tens of thousands of emails, made available exclusively to journalists and researchers via the platform. This event is cited as part of a larger effort aimed at exposing information held by Russian state‑affiliated and oligarch‑connected entities. No further campaigns or operations are detailed in the provided source material.