Cyber Incident Victim: Westboro Baptist Church
Date:
Sep 2015
Location:
United States of America
Summary
An unidentified hacker using the alias "sgtbilko420" conducted distributed denial-of-service (DDoS) attacks against multiple websites promoting racism, including the Westboro Baptist Church, Ku Klux Klan affiliates, an Islamic State-linked platform, and a former Canadian prime minister's site. The attacker claimed motivation to end racism, disabling approximately 20 targets beginning in mid-September, with some sites subsequently restoring functionality. The perpetrator issued public warnings of planned Halloween attacks against additional racist platforms while offering a financial bounty for attempts to reveal their identity. Operating independently without group affiliations, the individual employed botnet-driven traffic floods to disrupt site operations, maintaining anonymity despite counter-threats from affected parties.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In late 2015, an unidentified hacker using the alias "sgtbilko420" initiated a series of disruptive cyberattacks targeting organizations and individuals perceived as promoting racist ideologies. The campaign began on September 15 with distributed denial-of-service (DDoS) attacks designed to overwhelm targeted websites with traffic from compromised systems. Over the following five weeks, the attacker successfully disrupted approximately 20 websites, including platforms associated with the Ku Klux Klan, the Westboro Baptist Church, an Islamic State-affiliated site, and a personal site belonging to former Canadian Prime Minister Stephen Harper. The hacker publicly claimed responsibility through Twitter, declaring on October 21 that their motivation was to end racism in modern society, explicitly stating "this is not the 1800s anymore." Tactical details revealed the exclusive use of DDoS methodology rather than data breaches or system compromises.
The operational impacts included temporary takedowns of multiple websites, though some services were restored despite ongoing attacks. The perpetrator escalated threats via social media on October 21, 2015, warning of planned Halloween attacks against 20 additional racist websites while boasting about their technical capabilities. No evidence indicated affiliation with established hacking collectives like Anonymous. A notable development involved the hacker offering a $5,000 bounty for successful doxing of their identity, challenging adversaries to uncover their personal information. Despite public threats from affected parties, the attacker remained unidentified through the documented timeframe, maintaining operational security while continuing to announce future attack intentions through their Twitter account @sgtbilko420.