Bitcoin Baron
Attribution profile
- Type
- Activist
- Location
- United States of America
- Known incidents
- 4 incidents
- Sources
- 2 sources
- First seen
- 2015-03-04
- Last seen
- 2015-03-15
- Updated
- 2026-10-25 07:26
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Bitcoin Baron is a hacker alias associated with the United States of America, known for targeting municipal governments and police departments. This threat actor's activities in March 2015 demonstrate a focus on financial extortion and disruptive vigilantism. In an attack on the City of Moore, Oklahoma, Bitcoin Baron planted malware to exfiltrate personnel information, demanded a ransom of 100 bitcoins, and disrupted the city's website as retaliation for its defense of police officers in a local case. Similarly, the actor compromised the City of San Marcos, Texas, and its police department websites to demand the imprisonment of a former officer, though this action was based on outdated information. Notable tactics include the use of malware for data theft, website disruption, and public communications via YouTube to justify actions. No evidence links Bitcoin Baron to state actors or organized criminal groups, and the actor appears to operate independently. These incidents highlight a pattern of leveraging cyber attacks for both ideological retribution and financial gain.
Incidents
Attributed incidents are available to members.
4 incidentsSources
Sources available to members: 2 sources.