Cyber Incident Victim: Tgram
Date:
Apr 2022
Location:
Russia
Summary
Anonymous and the IT ARMY of Ukraine targeted Russian entities including private businesses, a major surveillance system at the Kremlin, and the social media platform Rossgram. The Black Rabbit World, an Anonymous affiliate, claimed responsibility for breaching the surveillance system and warned of further exposure. Data from those intrusions was leaked via DDoSecrets, and the IT ARMY also created a fake version of the platform after compromising it.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The incident involves the hacking of Rossgram, a Russian social media platform described as a version of Instagram, by the IT ARMY of Ukraine. According to the article dated April 7, 2022, this hack was publicly announced by the IT ARMY of Ukraine during the same week they were active. Following the announcement, the hacktivist group created a fake Rossgram application. The article does not specify the exact date of the hack within that week, the technical method used to compromise the platform, or the specific data accessed from Rossgram's systems. The creation of a fraudulent application suggests a subsequent action aimed at potentially deceiving users or further disrupting the service's operations.
This activity occurred within a broader campaign attributed to the Anonymous collective and its affiliated groups. The article states that Anonymous claimed to have hacked multiple private businesses and leaked their data through the DDoSecrets platform during that same week. A specific subgroup, The Black Rabbit World operating under the Anonymous umbrella, separately claimed to have gained access to the CCTV system and the Kremlin, posting a message online. The Rossgram hack is presented as one component of these coordinated efforts by pro-Ukraine hacktivists against Russian entities. The consequences for Rossgram are not detailed; the article does not report on service disruption, data theft specifics, user impact, or any official response from Rossgram or Russian authorities to this particular compromise. The narrative ends with the mention of the fake app creation, with no further information on its distribution, functionality, or ultimate impact provided in the source material.