Cyber Incident Victim: Kremlin CCTV system
Date:
Apr 2022
Location:
Russia
Summary
Hackers associated with Anonymous and the IT ARMY of Ukraine breached the Kremlin's CCTV systems, claiming unauthorized access and threatening further exposure of sensitive information. The Black Rabbit World subgroup publicly announced the intrusion, emphasizing their presence within the secure facility, while data leaks were facilitated through the DDoSecrets platform as part of broader disruptive cyber activities targeting Russian infrastructure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On or around April 6, 2022, the hacktivist collective Anonymous, operating through its subgroup The Black Rabbit World (@Thblckrbbtworld), claimed responsibility for compromising the CCTV surveillance system within the Kremlin complex in Moscow. The group publicly announced the intrusion via online channels, declaring, “We won’t stop until we reveal all of your secrets. You won’t be able to stop us. Now we’re inside the castle, Kremlin.” This breach formed part of a broader wave of cyber operations targeting Russian entities during the early months of the Russia-Ukraine conflict. The attackers positioned the operation as retaliation against the Russian government, aligning with Anonymous’ coordinated campaign supporting Ukraine. The compromised CCTV infrastructure represented a symbolic penetration of a high-security government facility, though the specific technical methods of infiltration and the duration of unauthorized access were not detailed in public claims.
The incident’s primary confirmed impact centered on the exfiltration and subsequent publication of data through the DDoSecrets leak platform, consistent with Anonymous’ established tactics for exposing compromised information. While the precise scope of accessed CCTV footage or related systems remained unspecified, the breach underscored vulnerabilities in physical security infrastructure tied to a critical government site. No official Russian response to the Kremlin CCTV compromise was documented in available reporting, nor were containment measures or forensic findings disclosed. The operation coincided with other Anonymous-affiliated actions that week, including intrusions into multiple Russian private businesses and the IT ARMY of Ukraine’s disruption of Rossgram, a domestic social media platform. The CCTV breach amplified psychological and propaganda effects by demonstrating access to restricted systems, though tangible operational disruptions to Kremlin security protocols were not independently verified.