Cyber Threat Actor: DigiHacktivists

DDoSsecret, also operating under the alias DigiHacktivists, is a threat actor based in Spain. This group has been linked to operations targeting telecommunications providers and digital forensics firms, with a focus on accessing and exposing sensitive data. Their activities demonstrate objectives centered on disruption and information disclosure rather than direct financial gain. The group’s breach of Digi in April 2023 involved unauthorized access to customer personal data, though the company asserted that highly sensitive identifiers remained uncompromised. In the Cellebrite incident of January 2023, the actor collaborated with Enlace Hacktivist to leak proprietary law enforcement tools and internal documents, highlighting an alignment with hacktivist causes. This operation leveraged a whistleblower to obtain and distribute 1.7 terabytes of data, amplifying ethical criticisms of Cellebrite’s technology and its alleged role in surveillance abuses.

DDoSsecret employs data leakage via public platforms like torrents and their namesake distribution channels, as evidenced in the Cellebrite breach. Their operations exploit unauthorized access to corporate systems, though specific initial access vectors remain unspecified in available reporting. The group’s targeting of telecommunications and forensic technology sectors suggests an intent to undermine entities perceived as enabling privacy violations or state overreach. The Cellebrite leak exposed tools like UFED, directly impacting law enforcement capabilities and reigniting debates about the ethics of surveillance partnerships. By publicly disseminating stolen data, DDoSsecret seeks to inflict reputational damage and operational disruption on its targets while advancing broader hacktivist narratives against perceived institutional misconduct.