Cyber Threat Actor: Faisal Al Hamzi

Faisal Al Hamzi is a threat actor publicly associated with website defacement activities conducted under the Team Bad Dream moniker. This Saudi-affiliated hacking group gained visibility through a March 2015 operation targeting U.S. and Egyptian government digital assets. Their most documented attack compromised a subpage of the Picatinny Arsenal website—a U.S. Army facility involved in armaments development—replacing official content with an image of Saudi Arabia's monarch and a message declaring indifference toward critics. The defacement included operational Twitter handles for public contact, remaining publicly visible during initial reporting. Simultaneously, Team Bad Dream executed comparable website alterations against an Egyptian government ministry portal, demonstrating cross-regional targeting of state entities. Neither incident reportedly caused operational disruptions or data exfiltration beyond the visible content replacement.

The actor's activities focus on symbolic disruption rather than financial gain or infrastructure damage, with confirmed targets limited to governmental websites across the Middle East and North America. Their sole documented technique involves unauthorized access to web properties for political messaging through defacement, though specific intrusion methods remain unspecified in public reporting. The 2015 dual-operation against U.S. and Egyptian targets represents their most visible campaign, leveraging nationalist imagery and rhetoric while avoiding destructive payloads. No verifiable organizational structure, state sponsorship claims, or malware tooling have been formally attributed to this entity beyond the cited defacement incidents.