Anonymous Protection

Anonymous Protection conducted a cyberattack on 16 January 2015 that compromised the customer database of the group responsible for distributed denial‑of‑service attacks against major gaming networks. The breach exposed credentials and transaction details of over 14 241 users and revealed plaintext passwords associated with those accounts. Approximately $11 000 in Bitcoin payments linked to attacks orchestrated through the LizardStresser service were also disclosed in the leaked data. The LizardStresser service had previously targeted gaming platforms to promote its offerings, and the leaked information provided actionable intelligence for rival threat actors and law‑enforcement agencies, undermining the service’s operations and credibility in underground markets.

On 25 December 2014 Anonymous Protection executed retaliatory cyber operations against the rival group Lizard Squad, disabling their website through a denial‑of‑service attack. The group reported violations to Twitter, citing Lizard Squad’s promotion of paid cyberattack services and harassment campaigns, which facilitated the suspension of Lizard Squad’s Twitter account. This takedown followed Lizard Squad’s prior distributed denial‑of‑service disruptions targeting gaming platforms and a celebrity social media account, alongside threats directed at Anonymous Protection. The operation demonstrated the group’s capacity to coordinate technical disruptions and leverage platform‑reporting mechanisms to affect adversaries’ online presence.

Anonymous Protection’s activities, as documented in these incidents, involve conducting targeted cyber intrusions and denial‑of‑service actions against perceived rivals, often accompanied by reporting abusive behaviour to service providers. The group’s actions have resulted in the exposure of sensitive user data, the disruption of rival infrastructure, and the prompting of enforcement responses from platforms such as Twitter. These actions illustrate a pattern of offensive cyber operations combined with strategic use of abuse‑reporting tools to undermine opponents’ capabilities and reputation.

No explicit information about the organisation’s size, organisational structure, ownership, or parent/subsidiary relationships is provided in the supplied material, so those aspects are not included in this profile. The profile is limited to the confirmed facts described in the two known incidents.