Cyber Incident Victim: Black Rabbit World
Date:
Apr 2022
Location:
Russia
Summary
A cyber operation attributed to Anonymous and the IT ARMY of Ukraine targeted Russian entities, with the Black Rabbit World collective claiming responsibility for breaching multiple private businesses and leaking their data through DDoSecrets. The group specifically asserted unauthorized access to the Kremlin's CCTV systems, declaring their presence within the infrastructure. Concurrently, the hacktivist campaign compromised Rossgram, a Russian social media platform, leading to the creation of a fraudulent application as part of the disruptive efforts against Russian digital assets.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On or around April 6, 2022, the hacktivist collective Black Rabbit World, operating under the Anonymous umbrella, conducted cyber operations against Russian entities. The group claimed responsibility for compromising multiple private businesses, exfiltrating their data, and leaking it through the DDoSecrets platform. Black Rabbit World also asserted unauthorized access to the Kremlin’s CCTV surveillance systems, announcing their intrusion with a public statement: “We won’t stop until we reveal all of your secrets. You won’t be able to stop us. Now we’re inside the castle, Kremlin.” The breach implied potential exposure of sensitive visual monitoring infrastructure within a high-security government complex. No technical details regarding the methods of infiltration or the specific CCTV systems affected were disclosed. The incident formed part of a broader Anonymous campaign targeting Russian organizations amid geopolitical tensions following Russia’s invasion of Ukraine.
Concurrently, the IT ARMY of Ukraine—a separate hacktivist collective aligned with Ukrainian interests—executed complementary operations, including the compromise of Rossgram, a Russian-developed alternative to Instagram. The IT ARMY subsequently created and distributed a counterfeit Rossgram application, though the article did not specify whether this fake app facilitated additional compromises or data theft. Both Black Rabbit World’s Kremlin CCTV claim and the IT ARMY’s Rossgram intrusion exemplified sustained offensive cyber activities against Russian digital assets during this period. The incidents highlighted the exploitation of both governmental and commercial platforms, though the full operational impact of the CCTV breach remained unverified in the source material. No containment measures or responses from the affected Russian entities were detailed in the reporting.