From 753cca049b13f3d31c0ce79c2576ef9421bf6b68 Mon Sep 17 00:00:00 2001 From: Mathieu4141 Date: Fri, 20 Dec 2024 02:55:34 -0800 Subject: [PATCH] [threat-actors] Add Anonymous KSA --- clusters/threat-actor.json | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 2cbb3f8..1d45d5f 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -17537,6 +17537,17 @@ }, "uuid": "301ffea9-edd5-4d89-a65f-8add8e34e95d", "value": "Storm-0940" + }, + { + "description": "Anonymous KSA is a Saudi hacking group that has executed cyber attacks targeting Indian institutions, including a significant breach of UIDAI's data storage units, leading to access to sensitive information and system disruption. The group claims these actions are in response to India's normalization of ties with Israel and its treatment of Palestinians. They have called for support for the Palestinian cause and accountability for the damage caused by their operations. The group's TTPs include targeting government agencies and leveraging public sentiment to justify their actions.", + "meta": { + "refs": [ + "https://x.com/DailyDarkWeb/status/1807783849608286296", + "https://cybershafarat.com/2024/07/22/hacking-group-anonymous-ksa-a-notorious-threat-actor-is-targeting-india-in-a-series-of-cyber-attacks/" + ] + }, + "uuid": "b869c1dc-0cf8-4d8a-b5f3-5b90c557db1c", + "value": "Anonymous KSA" } ], "version": 321