Threat actor

Anonymous

threat_actor:anonymous Also: Anon, Anons, We are Anonymous

Anonymous collective that issued threats and conducted or supported attacks against Boston Children’s Hospital in the name of defending Justina Pelletier.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing USES distributed denial-of-service attack Explicit 14
outgoing USES phishing Explicit 14
outgoing TARGETS ISIS Explicit 50
incoming ATTRIBUTED_TO #OpJustina Explicit 14
incoming ATTRIBUTED_TO Boston Children’s Hospital network attack Attributed 14
incoming PART_OF Operation Fun Kill Explicit 62
incoming ASSOCIATED_WITH Higinio Ochoa Explicit 63
incoming ATTRIBUTED_TO Anonymous PayPal attack Explicit 63
incoming ATTRIBUTED_TO NTP DDoS attack Uncertain 65
incoming ASSOCIATED_WITH MLT Uncertain 109
incoming ASSOCIATED_WITH TeaMp0isoN Uncertain 109
incoming ASSOCIATED_WITH AnonSec Explicit 139

Claims

#OpJustina ATTRIBUTED_TO Anonymous

The campaign is presented as an Anonymous operation, with the video ending in a declaration that Operation Justina is engaged.

Explicit Confidence 99% · Anonymous EP 14 Details

“Operation Justina engaged.”

Anonymous · offsets 10046–10072

Anonymous USES distributed denial-of-service attack

Anonymous members used denial-of-service attacks against the hospital’s network and public websites.

Explicit Confidence 99% · Jack Rhysider EP 14 Details

“members from Anonymous began a network attack on the Boston Children’s Hospital. It was a typical denial-of-service attack”

Jack Rhysider · offsets 11226–11349

Anonymous USES phishing

Attackers associated with Anonymous used phishing emails during the campaign.

Explicit Confidence 95% · Jack Rhysider EP 14 Details

“They were sending in a lot of spam e-mails too, and phishing e-mails.”

Jack Rhysider · offsets 13953–14022

Boston Children’s Hospital network attack ATTRIBUTED_TO Anonymous

The attack is attributed in the episode to Anonymous, which publicly claimed responsibility for the campaign and was described as conducting the attacks.

Attributed Confidence 94% · Jack Rhysider EP 14 Details

“the hospital was under a severe attack from Anonymous”

Jack Rhysider · offsets 15130–15183

Anonymous TARGETS ISIS

Anonymous publicly declared a cyber war against ISIS and said it would take down ISIS sites, accounts, and email.

Explicit Direction flagged Confidence 99% · Anon EP 50 Details

“we started a cyber war on ISIS”

Anon · offsets 33111–33141

“ISIS, we will hunt you, take down your sites, accounts, e-mails”

Anon · offsets 33161–33224

Operation Fun Kill PART_OF Anonymous

Cam describes Operation Fun Kill as part of an Anonymous operation.

Explicit Confidence 99% · Cameron EP 62 Details

“he was involved in Operation Fun Kill which is part of like, Anonymous Operation”

Cameron · offsets 12817–12897

Higinio Ochoa ASSOCIATED_WITH Anonymous

Higinio says he adopted Anonymous because its ideals combined fun with social justice, while Jack emphasizes that Anonymous has no well-defined membership.

Explicit Confidence 96% · W0Rmer EP 63 Details

“that kind of lent itself from the adoption of Anonymous by me”

W0Rmer · offsets 1974–2035

“Nobody is really a member of Anonymous.”

Jack Rhysider · offsets 3028–3067

Anonymous PayPal attack ATTRIBUTED_TO Anonymous

Jack says a group of Anonymous people decided to take PayPal offline in retaliation for its treatment of WikiLeaks.

Explicit Confidence 99% · Jack Rhysider EP 63 Details

“a group of Anonymous people decided to take PayPal offline”

Jack Rhysider · offsets 4702–4760

NTP DDoS attack ATTRIBUTED_TO Anonymous

The episode presents Anonymous as having publicly claimed or bragged about the NTP DDoS attack, but the attribution is based on that public claim rather than independently established evidence.

Uncertain Confidence 82% · Jonathan Nichols EP 65 Details

“In those days it was fairly easy when you had Anonymous bragging about it on Twitter.”

Jonathan Nichols · offsets 36803–36888

MLT ASSOCIATED_WITH Anonymous

MLT felt loosely affiliated with Anonymous and observed activity in its IRC chat rooms; this was not presented as formal membership.

Uncertain Confidence 93% · Jack Rhysider EP 109 Details

“For a while, MLT felt loosely affiliated with Anonymous”

Jack Rhysider · offsets 4535–4590

TeaMp0isoN ASSOCIATED_WITH Anonymous

TeaMp0isoN sprang out of Anonymous and was once loosely affiliated with it, but later separated itself from Anonymous.

Uncertain Confidence 94% · Jack Rhysider EP 109 Details

“TeaMp0isoN sort of sprang out of Anonymous and was once loosely affiliated with them”

Jack Rhysider · offsets 19115–19199

AnonSec ASSOCIATED_WITH Anonymous

AnonSec was associated with Anonymous by name, although Default says it was anti-Anonymous and disliked receiving attribution as Anonymous.

Explicit Confidence 94% · Default EP 139 Details

“it got associated with Anonymous so much”