Cyber Threat Actor: RawShark

RawShark, also known by the alias whaledump, is a threat actor whose known location is New Zealand. The actor first came to public attention in mid‑2014 when they claimed responsibility for leaking emails from the account of conservative blogger Cameron Slater. The alias RawShark was used alongside the Twitter handle @whaledump in the associated disclosures. No further personal details such as real name or age have been confirmed in open sources. The actor described themselves as a teenage hacktivist in statements accompanying the leak.

The actor’s observed activity focused on gaining unauthorized access to an email account belonging to a New Zealand‑based media figure, indicating a targeting pattern that includes individuals involved in political commentary and blogging. The strategic objective evident from the leak was to expose alleged collusion between government officials, media figures, and private financiers, rather than to pursue financial gain, espionage, or disruptive damage. The reported technique involved compromising the email account, after which the actor extracted and published correspondence that implicated the Justice Minister and other public officials. No specific malware families, exploit kits, or custom tooling were referenced in the available sources; the actor’s methodology appears limited to credential‑based email intrusion.

Attribution to any state‑sponsored group, criminal consortium, or ideological network has not been established in public reporting; the actor remained anonymous and asserted that their motivations would lead to rapid identification if operational security lapsed. The most notable operation attributed to RawShark is the August 2014 email leak that contributed to the resignation of New Zealand Justice Minister Judith Collins and was later detailed in the book *Dirty Politics*. This incident represents the primary publicly reported campaign linked to the actor, showcasing a hacktivist‑style disclosure aimed at highlighting perceived governmental misconduct. No additional campaigns or tools have been documented in the sources provided.