Cyber Threat Actor: AnonxoxTn

AnonxoxTn, operating under the alias Anon Ghost, is a pro-ISIS hacktivist collective known for conducting cyber operations aligned with Islamic State propaganda objectives. The group distinguishes itself from the broader Anonymous collective by explicitly rejecting association with that movement while emphasizing opposition to Zionism and Israel. Their public statements frame activities as demonstrations of technical capability and ideological solidarity with global "freedom movements," explicitly denying motivations of personal fame or recognition.

The actor has demonstrated a focus on Southeast Asian law enforcement targets, exemplified by their July 2015 compromise of Malaysian Police social media accounts. This operation involved defacing official Facebook and Twitter profiles through unauthorized access, replacing branding with ISIS-affiliated imagery, Arabic text, and militant photographs. Attackers posted threatening messages directed at government officials alongside declarations of responsibility featuring "#AnonGhost was here" hashtags. The campaign served dual objectives of disrupting government communications and disseminating psychological terror through digital platforms, with restored accounts indicating transient rather than persistent access.

Technical execution relied on credential compromise for initial access to social media accounts, followed by manual defacement and propaganda distribution. No advanced malware or automated tooling was referenced in their signature attack. The group’s operational communications explicitly rejected financial or espionage motives, instead framing actions as symbolic demonstrations of capability supporting ideological goals. While claiming alignment with ISIS objectives, no verifiable organizational ties to formal terrorist structures or state sponsors have been publicly documented. The Malaysian Police breach remains their most prominently attributed operation, reflecting a pattern of high-visibility targets chosen for psychological impact over sustained intrusion.