Cyber Threat Actor: 034th adr355 Cr3w

The threat actor known by the aliases034th adr355 Cr3w and Mr 4nOnymOus is suspected to operate from Pakistan. The group describes itself as a collective of seventeen members led by Mr 4nOnymOus and has claimed responsibility for cyber incidents that involve website defacement and service disruption. Public reporting identifies the actor as a Pakistan‑based hacking collective that has targeted Indian online assets, with law enforcement treating its actions as matters of national security.

The actor’s observed targeting includes news media portals and government websites within India. In the Kasganj district incident the group defaced a local news portal, replaced its content with Pakistani songs, blocked access to the original site and left a message stating that security is an illusion. Similar activity has been reported against official websites of the Chhattisgarh and Kerala governments, where the actor reportedly brought down multiple domains. The actor’s tactics, as described in the sources, consist of gaining unauthorized access to web servers, altering site content, disabling normal service and inserting political or ideological messages; no specific malware families, exploit tools or initial access vectors are detailed in the available material.

Attribution to the group rests on the self‑identified name used in the defacement messages and the police characterization of the perpetrators as suspected Pakistan‑based hackers. While the incidents have prompted retaliatory actions from Indian hackers against Pakistani government domains, the sources do not establish a formal state nexus, criminal consortium affiliation or financial motive for the actor. The most notable publicly reported operations comprise the December 2015 Kasganj news portal defacement, the September 2015 takedown of Chhattisgarh and Kerala government websites, and the broader pattern of reciprocal website disruptions between Pakistani and Indian hacking groups that followed these events.