Cyber Threat Actor: AnonymousGlobo

AnonymousGlobo and Anonymous64 are the known aliases used by a hacktivist group that has been linked to the broader Anonymous collective and is reported to operate from China. The actor’s public statements and the content of its attacks indicate a focus on political and social issues rather than financial gain. No direct ties to a state sponsor or a criminal consortium have been established in the available sources.

The group’s targeting pattern includes government institutions, transportation services, and law‑enforcement agencies across different regions. In 2015 it defaced Chinese government websites such as the Hunan Police Academy and launched distributed denial‑of‑service disruptions against multiple state‑run domains. The same year it compromised the Baltimore Police Department’s servers, leaking email addresses and internal IP addresses to Pastebin. In 2023 it hijacked the in‑vehicle display system of Macau Radio Taxi Services to show graphics bearing the phrase “Hacked by Anonymous64” and messages concerning mainland Chinese social topics. Observed tactics involve website defacement, DDoS flooding, data leakage via public paste sites, and the deployment of a malicious Android application designed to monitor protest‑related movement. No specific malware families or initial‑access vectors are described in the material.

Representative operations attributed to the actor include the 2015 OperationChina campaign that hit Chinese police and government sites in solidarity with Hong Kong pro‑democracy protesters, the 2015 Baltimore Police Department data leak, and the 2023 Macau Radio Taxi incident that combined a display hijack with politically charged messaging. These actions demonstrate a consistent pattern of using digital disruption to broadcast dissent and draw attention to perceived injustices. The actor remains active under its aliases, continuing to employ defacement, service overload, and information exposure as its primary means of operation.