Cyber Threat Actor: Extazy007

Extazy007, also known as De_Reb0rNz, is the alias used by a pro‑ISIS hacktivist collective that has publicly identified itself as Anon Ghost. The group describes its actions as driven by ideological alignment with the Islamic State and a stated opposition to Zionism and Israel, while explicitly distancing itself from the broader Anonymous movement. Public statements from the group emphasize a desire to demonstrate technical capabilities and to show support for what they characterize as global freedom movements, rather than seeking personal notoriety or financial gain. These self‑described motives are drawn directly from the group’s own communications following their reported operations.

The collective’s known activity has focused on compromising government‑run social media platforms, with the sole publicly documented incident targeting the Malaysian Police’s official Facebook and Twitter accounts in July 2015. In that operation the attackers replaced profile pictures with Arabic text and ISIS‑affiliated symbols, posted declarations that included the hashtag “#AnonGhost was here,” and disseminated militant imagery and threatening messages aimed at Malaysian officials. The incident was confined to the Southeast Asian region, specifically Malaysia, and the sector affected was public safety communications, indicating a focus on governmental information channels rather than private industry or critical infrastructure. No evidence has been presented linking the group to financial theft, espionage, or sustained campaigns beyond this defacement activity.

Regarding tactics, the reported compromise relied on gaining unauthorized access to the social media accounts themselves, after which the actors performed defacement by altering visual elements and publishing propaganda content. No specific malware families, exploit kits, or distinctive tooling styles were disclosed in the open sources covering this event. Attribution remains limited to the group’s self‑identification as a pro‑ISIS hacktivist entity; no formal ties to state sponsors, criminal syndicates, or larger hacker coalitions have been established in publicly available reporting. The Malaysian Police social media breach stands as the group’s sole representative operation documented in the available record, illustrating their use of platform hijacking to spread ideological messaging and to assert a presence in the cyber domain.