Cyber Threat Actor: Cyber Haxors Group

The threat actor known as Cyber Haxors (also referred to as Cyber Haxors Group) uses the alias Cyber Haxors. Open‑source reporting indicates the group’s location is Russia, if known. On 8 January 2015 the group claimed responsibility for an incident involving the website of Bulgaria’s State Commission for Energy and Water Regulation (DKEVR). The attack replaced the regulator’s homepage with a message that listed the crew names of Cyber Haxors alongside the Bulgarian flag and state emblem. No additional text, demands or communications were visible on the compromised page.

Consequently, the DKEVR site became inaccessible to the public, causing operational disruption to the agency’s online presence. The incident was reported by Novinite.com on the same day. To date, this defacement remains the sole publicly documented operation attributed to Cyber Haxors. No further details about the group’s tools, techniques, infrastructure or broader targeting have been disclosed in open sources. Consequently, the actor’s profile is limited to the confirmed facts of this single website defacement event. Any inference about motives, sophistication, size or affiliations would exceed the information provided in the source material. The profile therefore reflects only what has been explicitly stated in the available reporting.