CSIDB logo
Incident

Lizard Squad

Incident posture

Attack window
Dec 2014
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2026-07-17 03:10

Linked entities

Victim
Lizard Squad
Threat actors
2 actors
Sources
1 source

Timeline

Occurred
Dec 2014
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Lizard Squad conducted disruptive cyberattacks including distributed denial-of-service (DDoS) incidents that disabled major gaming platforms and compromised a celebrity's social media account with threats to release private material. The group promoted a paid DDoS tool called Lizard Stresser before being targeted by hacktivist collective Anonymous, which disabled their website through similar tactics and successfully petitioned Twitter to suspend their account following violations of platform policies.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

In late 2014 and early 2015, the hacker group Lizard Squad conducted a series of disruptive cyberattacks targeting major online services. Their most prominent actions included distributed denial-of-service (DDoS) attacks that temporarily disabled Xbox Live and PlayStation Network gaming platforms on December 25, 2014, impacting holiday access for millions of users globally. The group subsequently shifted to social media manipulation, hacking into Taylor Swift's Twitter account and issuing threats to release private photographs. Lizard Squad openly advertised their "Lizard Stresser" service as a cyberattack-for-hire platform while maintaining an active Twitter presence (@lizardmafia) to claim responsibility for attacks and taunt victims. Their operational tactics centered around disrupting high-profile online services and leveraging social media for notoriety and service promotion.

The group's activities prompted countermeasures from Anonymous Protection, a subgroup of the hacktivist collective Anonymous. Following Lizard Squad's threats against Anonymous and continued DDoS operations, Anonymous Protection executed retaliatory actions in January 2015. They deployed DDoS attacks against Lizard Squad's primary website (lizardpatrol.com), forcing it offline. Concurrently, they organized mass reporting campaigns targeting Lizard Squad's Twitter account, resulting in its permanent suspension by Twitter for violations including threats and facilitation of illegal activities. Anonymous Protection publicly claimed victory through their Twitter channel, citing the website takedown and account suspension as evidence of successful counteroperations. These actions effectively disrupted Lizard Squad's public communication channels and service infrastructure at that time.

Sources

Sources available to members: 1 source.

CSIDB