Cyber Threat Actor: B00daMooda and @DepaixPorteur.

The threat actor known as B00daMooda and @DepaixPorteur operates as a hacktivist entity aligned with Ukraine during the 2022 geopolitical conflict. Publicly attributed activities associate this actor with Anonymous’ #OpRussia campaign, which targeted Russian organizations in retaliation for the invasion of Ukraine. The actor’s location has been identified as Ukraine, though no further organizational structure or membership details are disclosed in available sources. Their operations emphasize data theft and public dissemination as primary methods of disruption.

Targeting focuses on Russian entities across sectors including energy, government, industrial infrastructure, and scientific research. The 2022 breach of the Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography exemplifies this pattern, where the actor exfiltrated and leaked 466 GB of internal emails via DDoSecrets. Similarly, they participated in compromising Russian industrial firms like RostProekt, leaking 112 GB of data to undermine critical sectors supporting Russia’s wartime economy. Strategic objectives center on disrupting operations and exposing internal communications of organizations perceived as complicit in the conflict, with no financial or espionage motives cited. Tactics involve unauthorized access to email systems and data exfiltration, leveraging platforms like DDoSecrets and torrent networks for public distribution. No malware families, specific intrusion vectors, or tooling details are referenced in reporting. The actor’s affiliation with Anonymous is explicitly noted in breach announcements, but no state sponsorship or criminal consortium ties are evidenced. Activities remain confined to cyber operations within the #OpRussia framework, aligning with broader hacktivist efforts to amplify geopolitical dissent through digital means.