Cyber Incident Victim: HortiNews
Date:
May 2016
Location:
Kenya
Summary
A cyber incident occurred at hortinews.co.ke, resulting in a data leak. The hacking group Anonymous was attributed to the incident. The attackers likely used tactics such as exfiltration from end hosts and application servers to steal sensitive information. The incident compromised the confidentiality of the data, but the integrity and availability of the systems were not affected. The motives behind the attack are believed to be notoriety and personal satisfaction.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The cyber incident at hortinews.co.ke was a significant event that resulted in a data leak, compromising the confidentiality of sensitive information. The incident was attributed to the hacking group Anonymous, a decentralized collective known for their high-profile attacks on various organizations.

The attackers likely used tactics such as exfiltration from end hosts and application servers to steal sensitive information. This type of attack involves exploiting vulnerabilities in the target system to gain unauthorized access and extract data. In this case, the attackers may have used malicious links or compromised credentials to gain access to the system and steal data.
The incident compromised the confidentiality of the data, but the integrity and availability of the systems were not affected. This suggests that the attackers were primarily interested in stealing sensitive information, rather than disrupting the normal functioning of the system. The lack of disruption to the system's availability also suggests that the attackers may have taken steps to avoid detection, such as using stealthy tactics to evade security measures.
The motives behind the attack are believed to be notoriety and personal satisfaction. Anonymous is known for their desire to gain fame and prestige through their hacking activities, and this incident is likely an attempt to achieve that goal. The group's actions are often driven by a desire to expose vulnerabilities and highlight the weaknesses of their targets, rather than to cause financial harm or disrupt critical infrastructure.
The incident at hortinews.co.ke is consistent with Anonymous's modus operandi, which typically involves exploiting vulnerabilities in high-profile targets to gain notoriety and attention. The group's actions are often seen as a form of protest or activism, aimed at highlighting issues such as government corruption, corporate greed, or social injustice.
The attack on hortinews.co.ke is also consistent with the broader trend of cyber attacks on media organizations. Media outlets are often seen as high-profile targets, and are frequently attacked by hacking groups seeking to gain notoriety or disrupt the flow of information. These attacks can have significant consequences, including the theft of sensitive information, disruption of critical infrastructure, and damage to the organization's reputation.
The incident at hortinews.co.ke highlights the importance of robust cybersecurity measures, including the use of encryption, secure authentication protocols, and regular security updates. It also underscores the need for organizations to be aware of the risks associated with cyber attacks, and to take steps to mitigate those risks through employee education, incident response planning, and regular security assessments.
In terms of the impact of the incident, it is likely that the data leak will have significant consequences for the individuals and organizations affected. The theft of sensitive information can lead to identity theft, financial loss, and reputational damage, and can also have broader consequences for the organization's reputation and trustworthiness.
The incident at hortinews.co.ke is a reminder of the ongoing threat posed by cyber attacks, and the need for organizations to remain vigilant and proactive in their cybersecurity efforts. It also highlights the importance of collaboration and information-sharing between organizations, governments, and law enforcement agencies in the fight against cyber crime.
The investigation into the incident is likely to be ongoing, and may involve the use of forensic analysis, network traffic monitoring, and other techniques to identify the attackers and understand their motivations. The results of the investigation may provide valuable insights into the tactics, techniques, and procedures used by the attackers, and may help to inform the development of more effective cybersecurity measures.
Overall, the cyber incident at hortinews.co.ke is a significant event that highlights the ongoing threat posed by cyber attacks, and the need for organizations to remain vigilant and proactive in their cybersecurity efforts. The incident is consistent with the broader trend of cyber attacks on media organizations, and underscores the importance of robust cybersecurity measures, employee education, and incident response planning.
