Cyber Incident Victim: Vitor Vieira Belfort
Date:
May 2015
Location:
Brazil
Summary
The official website of Brazilian MMA fighter and former UFC champion Vitor Vieira Belfort was compromised and defaced by the hacker group ProtoWave, which left a multilingual message in English and Japanese. The attackers, previously linked to hacking another Brazilian athlete's website, displayed a defacement notice but did not disclose a motive for the intrusion. The website remained inaccessible at the time of reporting, mirroring ProtoWave's prior pattern of targeting high-profile Brazilian sports figures.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On May 6, 2015, the official website of Brazilian mixed martial artist and former UFC Light Heavyweight Champion Vitor Vieira Belfort was compromised by a hacking group identifying itself as ProtoWave. The attackers replaced the site's content with a defacement page containing a message in English and Japanese. The English portion declared "Hacked by ProtoWave!" while the Japanese text translated to "I am a beast looking at the sky in thousands of eyes." Evidence of the breach was documented through Zone-H, a platform that archives website defacements, with a mirror link confirming the attack's occurrence. The targeted domain, vitorbelfort.com, remained under attacker control at the time of initial reporting. No compromise was reported for Belfort's verified social media accounts, which included a Facebook page and Twitter profile with 1.33 million followers.
The incident represented ProtoWave's second high-profile attack against a Brazilian athlete within weeks, following their April 2015 breach of footballer Ronaldinho's website. Attackers did not disclose motives through their defacement message or associated channels. The website remained non-operational and displayed the unauthorized content when cybersecurity news outlets published initial reports. No statements from Belfort or his management team regarding remediation efforts were documented in available sources at the time of disclosure. The breach exposed vulnerabilities in the athlete's digital infrastructure despite his prominent public profile and large online following. Zone-H's mirror provided persistent evidence of the compromise after the live site became inaccessible.