MaeSTro-GhoL
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
MaeSTro-GhoL is the alias used by a threat actor referenced in open‑source reporting as a Moroccan hacker who conducted a website defacement against the City of DuBois, Pennsylvania in August 2014. The actor is also noted in the provided context as being associated with the United States of America, indicating a possible operational or geographic link to that country. The defacement was carried out under the banner of several Gaza‑related hashtags and included a message declaring “PalesTine is Free” along with a YouTube video in support of Palestine. The actor explicitly stated that the motivation for targeting the U.S. government‑owned website was to protest the Israeli invasion of Gaza and the United States’ financial support for Israel.
The incident demonstrates a focus on governmental targets, specifically municipal websites located within the United States, reflecting a pattern of aiming at public‑sector entities rather than private industry or critical infrastructure. The strategic objective expressed by the actor was political protest, with the defacement serving as a means of conveying a message and causing temporary disruption to the availability of the city’s online services. The tactics observed were limited to website defacement, involving the replacement of legitimate content with a protest page and embedded media; no malware families, exploit tools, or specific initial‑access vectors were described in the source material.
No public attribution links MaeSTro‑GhoL to a state sponsor, criminal consortium, or larger hacktivist collective beyond the loose association with Anonymous‑sympathetic actions mentioned in the article. The DuBois defacement is presented as a representative example of the broader hacktivist wave that targeted U.S. government sites during the 2014 Gaza conflict, illustrating how the actor used web‑site alteration to amplify a political stance without pursuing financial gain, espionage, or prolonged operational impact. The available information does not permit further detail on the actor’s capabilities, affiliations, or subsequent activities.
Incidents
Attributed incidents are available to members.
1 incident