Phantom Squad

Profile narrative

Phantom Squad, also known by its alias Phantom Squad, is a hacking group that has been identified as operating from the United States of America. The group’s known aliases include Phantom Squad itself, and it has been linked to the supporting collectives VandaSec and PhantomSec. Public reporting shows that Phantom Squad primarily targets online gaming services, including platforms such as Steam, Origin, Battle.net, League of Legends, Xbox Live, PlayStation Network and Electronic Arts’ Battlefield 1 servers. Their stated objective, as expressed in social‑media messages, is to cause disruption during peak holiday periods in order to ruin users’ gaming experiences. The group’s observed tactics consist of distributed denial‑of‑service attacks that overwhelm targeted services with traffic, a method they have claimed responsibility for via Twitter and other social channels. No malware families or specific initial‑access vectors are described in the available sources; the emphasis is on volumetric network flooding rather than intrusion or espionage tools.

Representative operations attributed to Phantom Squad include a December 2015 campaign that took down Electronic Arts servers and subsequently affected Xbox Live and PlayStation Network over the Christmas holiday, and a December 2016 series of attacks that simultaneously disrupted Steam, Origin, Battle.net and League of Legends during the holiday shopping season. In these incidents the group announced its actions on Twitter, threatened to keep services offline, and was later joined by a former member of LizardSquad, indicating a loose affiliation with that earlier hacking collective. Law‑enforcement interest followed the attacks, with the FBI reported to be investigating the group and several individuals linked to Phantom Squad being arrested in subsequent months. The group’s public statements and the timing of its actions show a clear pattern of aiming to disrupt gaming infrastructure rather than pursuing financial gain or intelligence collection. No evidence of state sponsorship or a broader criminal consortium has been presented in the material reviewed.

Incidents

Attributed incidents are available to members.

Sources

Sources available to members: 4 sources.