@YourVikingdomon
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor identified by the alias @YourVikingdomon is known to operate from the United States of America. Open source references describe the actor as a hacker group that uses the Twitter handle @YourVikingdomon for communication. The actor first appeared in public reporting in March 2015 when it claimed responsibility for a distributed denial of service attack against a state government website. No additional aliases, organizational details, or hierarchical structure have been disclosed in the available material.
Analyses of the 2015 incident indicate that the actor’s typical targets are government entities that lack adequate DDoS mitigation defenses. The observed strategic objective in those cases is to cause disruption by rendering the targeted online services unavailable for a limited period. The group’s methodology relies on generating high volumes of traffic to overwhelm the target rather than employing malware, exploit kits, or credential theft techniques. No public reporting links the actor to financial gain, espionage campaigns, or state sponsorship. The actor’s tooling style, as evidenced in the known incident, consists of straightforward traffic‑based disruption tools.
On March 27, 2015, @YourVikingdomon executed a DDoS attack against the Indiana state government website, rendering it inaccessible for approximately forty‑five minutes. The attack took place amid widespread protests against the state’s newly enacted Religious Freedom Restoration Act, which critics argued permitted businesses to refuse service to LGBT individuals on religious grounds. While the group’s social media posts referenced the controversial law as a motivating factor, security analysts concluded that the primary driver was entertainment derived from exploiting poorly protected online targets. The incident attracted broader attention, prompting companies such as Salesforce to cancel Indiana‑based programs in response to the legislative controversy. State officials restored the website’s functionality after the outage, and the platform subsequently suspended the actor’s Twitter account for violating its policies. No further campaigns or affiliations involving @YourVikingdomon have been verified in open source reporting beyond this single documented operation.
Incidents
Attributed incidents are available to members.
1 incident