Cyber Threat Actor: Tunisian Cracker

Tunisian Cracker, operating under the alias Anon Ghost, is a pro-ISIS hacktivist group known for conducting cyber intrusions aligned with extremist ideological objectives. The group has demonstrated a focus on targeting law enforcement entities in Southeast Asia, specifically compromising official government social media assets to disseminate propaganda. Their operations prioritize symbolic disruption over financial gain, leveraging digital defacements to amplify Islamic State messaging and issue threats against state authorities. Anon Ghost explicitly distinguishes itself from the broader Anonymous collective, framing its actions as support for global anti-Zionist movements and opposition to Israel while rejecting motivations of personal notoriety.

The group’s most documented operation involved hijacking the Malaysian Police’s Facebook and Twitter accounts in July 2015, replacing profile imagery with ISIS-affiliated symbols and Arabic text. Attackers posted militant propaganda, images of armed fighters, and direct warnings to government officials, accompanied by the signature "#AnonGhost was here." This campaign showcased their use of credential compromise as an initial access vector and social media platforms as primary attack surfaces. Tactics centered on rapid defacement to maximize visibility of pro-ISIS content before account recovery. Anon Ghost justified the breach as a demonstration of technical capability and ideological solidarity with international "freedom movements," emphasizing operational alignment with extremist causes rather than conventional cybercrime objectives. Malaysian authorities restored control of the compromised accounts within hours of the incident.