Cyber Incident Victim: Economic Freedom Fighters
Date:
Jun 2016
Location:
South Africa
Summary
A hacker known as Zim4thewin launched distributed denial-of-service (DDoS) attacks against the websites of two black nationalist political organizations, the Economic Freedom Fighters (EFF) and ZANU-PF, citing objections to their racial agendas. The attacker accused the EFF of promoting anti-white policies, including land expropriation and nationalization of key industries, while condemning ZANU-PF for historical corruption and violence. The attacks temporarily disrupted both groups' online presence, with the EFF's site recovering sooner than ZANU-PF's. The hacker claimed the actions were responses to perceived racism and harassment from supporters of the targeted organizations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On June 14, 2016, a hacker operating under the alias Zim4thewin conducted distributed denial-of-service (DDoS) attacks against the official websites of two political organizations: South Africa's Economic Freedom Fighters (EFF) and Zimbabwe's Zimbabwe African National Union – Patriotic Front (ZANU-PF). These attacks temporarily disrupted access to both websites, with the EFF's site recovering during the reporting period while ZANU-PF's remained offline. The incident followed a pattern of previous cyber operations by the same actor, who had targeted the EFF's online infrastructure the prior week and executed a DDoS attack against the South African Broadcasting Corporation (SABC) days earlier. The SABC attack had drawn public attention to the hacker's activities before the subsequent targeting of the political parties.
The attacker publicly justified the operations through Twitter statements and direct communications with media outlets, characterizing both political organizations as promoting racist agendas. Zim4thewin specifically accused the EFF of being "racist thugs" comparable to Nazis and condemned ZANU-PF for historical corruption and alleged human rights violations under Robert Mugabe's leadership. The attacks coincided with online harassment campaigns against the hacker, which they attributed to coordinated groups supporting the African National Congress (ANC) and EFF. Technical details about the attacks remained limited, with sources describing them as "simple DDoS" operations intended to disrupt website availability rather than compromise data. No statements from the targeted organizations regarding incident response or mitigation efforts were documented in the available reporting. The primary immediate impacts included temporary service disruption and increased public scrutiny of the political groups' online operations and ideological positions.