CSIDB logo
Threat actor

SinfulHazeCE

Attribution profile

Type
Activist
Location
South Africa
Known incidents
1 incident
First seen
2016-05-13
Last seen
2016-05-13
Updated
2026-07-31 03:40
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

SinfulHazeCE is an alias used by a member of the hacking collective New World Hackers, which has been publicly linked to the Anonymous‑led #OpAfrica campaign. The individual is associated with South Africa, as the group’s activities described in the available sources focus on targets within that country. New World Hackers describes itself as a loose crew of hackers that collaborates under the broader Anonymous banner for specific operations.

The actor’s known activity involves exploiting vulnerabilities in website code to gain initial access, as evidenced by the breach of the University of Limpopo’s site in May 2016. After compromising the site, the group defaced it with messages promoting #OpAfrica and criticism of the institution’s security practices, then exfiltrated data including exam papers, promotional documents, personal details of current students and alumni, faculty phone numbers, and administrative credentials in both hashed and cleartext form. The stolen information was stored on a Mega.nz file repository and disseminated through paste sites, indicating a reliance on publicly available cloud storage and text‑sharing platforms for distribution rather than custom malware. No specific malware families or exploit kits are mentioned in the sources.

The University of Limpopo incident is presented as part of the ongoing #OpAfrica campaign, with New World Hackers stating that additional data dumps were planned as part of the same operation. This operation represents the actor’s most clearly documented effort, highlighting a pattern of targeting educational institutions in South Africa to disrupt services, expose perceived security shortcomings, and leak personal and administrative data as a form of activism. The available material does not attribute the actor to any state sponsor or criminal consortium, nor does it describe financial gain or espionage as objectives.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB