Cyber Threat Actor: The Black Rabbit World

The Black RabbitWorld is a hacktivist group that operates under the Anonymous umbrella and has been linked to the IT ARMY of Ukraine. The group uses the alias The Black Rabbit World and is associated with the Twitter handle @Thblckrbbtworld. Public sources indicate that the group is based in Russia, although this location is noted as known if available. Their activities are carried out in coordination with broader Anonymous campaigns against Russian entities following the 2022 invasion of Ukraine.

The group’s targeting has focused on Russian government institutions, private corporations, and domestic digital platforms. They have claimed unauthorized access to the Kremlin’s closed‑circuit television system, to multiple private businesses, and to the Rossgram social‑media service, which is a Russian analogue of Instagram. Their stated objectives involve disrupting Russian digital assets and exposing sensitive information through data leaks, as evidenced by their publication of stolen data on the DDoSecrets platform and the Mega NZ file‑hosting service. Notable operations attributed to The Black Rabbit World include the April 2022 breach of the Kremlin CCTV network, during which they announced their presence inside the facility and threatened further exposure. In the same period they claimed to have compromised several private companies and leaked the resulting data via DDoSecrets. Earlier in March 2022 the group asserted responsibility for leaking 28 GB of documents stolen from the Central Bank of Russia, distributing the material through two Mega NZ links and describing the contents as economic secrets. Additionally, they participated in the hack of Rossgram, creating a counterfeit version of the app to undermine the legitimate service.