Menu
Browse

Cyber Threat Actor: Mr.Ajword

Actor Type Location Known Incidents
 Icon
Activist
1 incident
Profile

Mr.Ajword is an alias used by a member of the pro‑ISIS hacktivist collective known as Anon Ghost. The actor first came to public attention in July 2015 when the group compromised the official Facebook and Twitter accounts of the Malaysian Police. During that intrusion the attackers replaced profile pictures with Arabic text and symbols associated with the Islamic State, and they posted declarations that included the phrase “#AnonGhost was here.” The defacement also featured militant imagery and threatening messages directed at Malaysian government officials, while the group explicitly distanced itself from the broader Anonymous movement. Anon Ghost stated that its actions were intended to demonstrate its technical capabilities and to express ideological alignment with ISIS rather than to seek notoriety. The group further claimed opposition to Zionism and Israel and expressed support for what it described as global freedom movements.

The Malaysian Police accounts were restored after the breach, indicating a temporary disruption rather than a persistent compromise. The incident illustrates the actor’s focus on government targets, specifically law‑enforcement agencies, within the Southeast Asian region. The primary objective observed was ideological disruption through propaganda dissemination and account defacement, with no indication of financial gain or espionage motives. Technical details released about the operation describe the use of compromised credentials to gain access to social‑media platforms, followed by the posting of extremist content and the alteration of visual identifiers. No specific malware families, exploit tools, or infrastructure were disclosed in the reporting of this event. Attribution to a state sponsor or to a criminal consortium has not been established in open sources; the actor is linked solely to the self‑described pro‑ISIS hacktivist persona of Anon Ghost. This 2015 operation remains the most representative publicly reported activity associated with the Mr.Ajword alias.

Incidents
Attributed incidents available to members
1 incident
Sources
Sources available to members
0 sources