Black Dragon
Attribution profile
- Type
- Activist
- Location
- India
- Known incidents
- 8 incidents
- Sources
- 3 sources
- First seen
- 2014-04-25
- Last seen
- 2020-10-09
- Updated
- 2026-10-18 02:48
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Black Dragon is an Indian hacktivist known by the alias Black Dragon, who has claimed affiliation with the Indian Hacker's Online Squad. The actor primarily targets government and financial sector entities in South Asia, notably Pakistani government websites and Nepal's eSewa digital payment service, with objectives expressed as political retaliation and expression over Kashmir tensions (as stated by the actor in the PPP defacement) and, in the eSewa case, the release of user personal information. Observed tactics include defacing websites by adding entries through content management systems or admin panels after compromising a shared hosting server, and leveraging third‑party phishing to obtain and release personal information from payment platforms. Notable operations include the 2014 Operation Pakistan campaign that defaced multiple Pakistani government portals (National Portal, Cabinet Ministry, Ministry of Defense, etc.), the 2014 defacement of the Pakistan Peoples Party website, and the 2020 eSewa data breach in which user details were publicly released.
Incidents
Attributed incidents are available to members.
8 incidentsSources
Sources available to members: 3 sources.