CSIDB logo
Threat actor

HusseiN98D

Attribution profile

Type
Terrorist
Location
-
Known incidents
1 incident
First seen
2015-07-13
Last seen
2015-07-13
Updated
2026-04-14 00:40
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

HusseiN98D is an alias linked to the pro‑ISIS hacktivist collective known as Anon Ghost. The alias appeared in public reporting after the group’s July 2015 operation against Malaysian police social media channels. Anon Ghost describes itself as a hacktivist movement that aligns with Islamic State ideology while distancing from the broader Anonymous network. The actor’s public presence is therefore tied to this specific ideological hacktivist framework.

The July 13 2015 incident targeted the official Facebook and Twitter accounts of the Malaysian Police force. Attackers replaced the profile pictures with Arabic text and ISIS‑affiliated symbols, filled the feeds with militant imagery, and posted threatening messages directed at government officials. Declarations such as “#AnonGhost was here” were disseminated to claim responsibility and to distinguish the act from Anonymous operations. The stated aim was to demonstrate the group’s capabilities and to express support for global freedom movements while opposing Zionism and Israel.

The tactics observed in this breach consisted of social‑media account defacement rather than the deployment of malware or exploit kits. Initial access appears to have been gained through credential compromise or social engineering, though the reporting does not detail the exact vector. No specific malware families, custom tools, or advanced persistence mechanisms were mentioned in the open sources. The operation relied on straightforward content replacement and propaganda posting to achieve its impact.

Attribution to Anon Ghost is based on the group’s own claims and the analysis of security researchers who linked the activity to the pro‑ISIS hacktivist milieu. No public evidence connects HusseiN98D or Anon Ghost to a state sponsor, a criminal consortium, or a financially motivated enterprise. The actor remains categorized as an ideologically driven hacktivist entity.

The Malaysian Police social‑media compromise stands as the most prominently reported operation associated with HusseiN98D and Anon Ghost. It illustrates the actor’s focus on high‑visibility platforms to spread ideological messaging and to signal capability. No further campaigns have been detailed in the available sources, making this incident the primary reference point for understanding the actor’s public activity.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB