JaXpArO
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
DDoSecrets, also referenced as DDoSecrets, is a transparency collective that has been linked to the Anonymous hacker collective and is known for obtaining and disseminating leaked data sets. The group has released large volumes of information obtained from various sources, including law enforcement data, corporate documents from corporations operating in Myanmar after the military coup, and other proprietary material that it makes available to journalists, researchers, and the public. Their activities are described in the source as part of a broader effort to increase transparency and expose information that would otherwise remain hidden.
The collective’s typical tactics involve acquiring data through hacks or leaks provided by other actors and then deciding whether to publish the material openly or to share it privately with selected recipients. In the case of the Gab data leak, DDoSecrets chose to distribute the information only to journalists and researchers, a decision described in the source as an attempt to limit the exposure of private individuals who post innocuous content such as family photos or posts about children’s activities. The group has also previously released the BlueLeaks collection of law enforcement data and has circulated corporate data taken from Myanmar firms following the coup there, demonstrating a pattern of targeting governmental and corporate entities perceived as opaque or abusive.
Notable operations attributed to DDoSecrets include the publication of the BlueLeaks law‑enforcement data set, the distribution of corporate data stolen from Myanmar companies after the February 2021 coup, and the controlled release of the Gab user data set to media and academic audiences for scrutiny of extremist content and discussions related to the January 6 Capitol riot. These actions are presented in the source as part of the group’s strategy to provide material that can be examined for evidence of wrongdoing, extremist ideology, or attempts to subvert democratic processes, while attempting to minimize unnecessary intrusion into the private lives of ordinary users.
The source associates DDoSecrets with the Anonymous collective, noting its rise to prominence through the BlueLeaks leak that was linked to a hacker affiliated with Anonymous, and describes it as a transparency collective rather than a state‑sponsored or criminal enterprise. No explicit attribution to a nation‑state or criminal syndicate is provided in the material. The group’s stated motivation, as conveyed by a member identified as Best, is to reduce the risk of unwarranted privacy invasions while still enabling journalists and researchers to examine data that may reveal significant societal or political issues. This approach reflects their stated aim of balancing transparency with a concern for the privacy of individuals who are not the focus of the disclosed information.
Incidents
Attributed incidents are available to members.
1 incident