The Black Rabbit World

Profile narrative

The Black Rabbit World is a hacktivist group that uses the alias @Thblckrbbtworld and operates under the broader Anonymous collective. Public sources indicate the group is based in Russia, although no official confirmation of its exact location has been provided. It identifies itself as a subgroup of the IT ARMY of Ukraine and aligns with Anonymous‑linked operations against Russian targets. The group’s public statements are typically posted on Twitter and amplified through platforms such as DDoSecrets and Mega NZ. Its activity emerged prominently during the spring of 2022 in conjunction with the #OpRussia campaign.

The Black Rabbit World has focused its efforts on Russian governmental and commercial entities, claiming unauthorized access to the Kremlin’s closed‑circuit television system and to private business networks. It also claimed responsibility for compromising Rossgram, a Russian‑made Instagram alternative, and for distributing a counterfeit version of that application. In March 2022 the group announced the exfiltration of 28 gigabytes of data from the Central Bank of Russia, which it shared via two Mega NZ links containing folders labeled A and B. The leaked material consisted of offices and text files written in Cyrillic and was described by the group as containing economic secrets. These actions were framed as part of a broader effort to expose and disrupt Russian digital infrastructure.

The group's reported tactics include gaining remote access to surveillance systems, creating fraudulent mobile applications, and publishing stolen data through leak‑oriented services such as DDoSecrets and file‑hosting sites like Mega NZ. No specific malware families or exploit kits are mentioned in the available sources; the emphasis is on credential‑based or vulnerability‑driven intrusions followed by data exfiltration. Communication relies on social media announcements, particularly Twitter accounts associated with Anonymous TV, to claim responsibility and distribute links to the leaked content. The Black Rabbit World’s activities are consistently linked to hacktivist motivations rather than financial gain, as evidenced by the public nature of the data releases and the lack of ransom demands. Its operations are representative of the Anonymous‑aligned campaign that targeted Russian institutions during the 2022 conflict.

Incidents

Attributed incidents are available to members.