Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started
Threat Actors OurMine

Description

OurMine is known for celebrity internet accounts, often causing cyber vandalism, to advertise their commercial services. (Trend Micro) In light of the recent report detailing its willingness to pay US$250,000 in exchange for the 1.5 terabytes’ worth of data swiped by hackers from its servers, HBO finds itself dealing with yet another security breach. Known for hijacking prominent social media accounts, the self-styled white hat hacking group OurMine took over a number of verified Twitter and Facebook accounts belonging to the cable network. These include accounts for HBO shows, such as “Game of Thrones,” “Girls,” and “Ballers.” This is not the first time that OurMine has claimed responsibility for hacking high- profile social networking accounts. Last year, the group victimized Marvel, The New York Times, and even the heads of some of the biggest technology companies in the world. Mark Zuckerberg, Jack Dorsey, Sundar Pichai, and Daniel Ek — the CEOs of Facebook, Twitter, Google and Spotify, respectively — have also fallen victim to the hackers, dispelling the notion that a career in software and technology exempts one from being compromised.

AI Analysis

· 1 week ago

Executive Summary

OurMine, a self-proclaimed white hat hacking group, targets high-profile social media accounts, including those of celebrities, HBO, Marvel, and tech CEOs, primarily to showcase their skills and attract attention.

Goals & Targeting

OurMine targets high-profile individuals and organizations in sectors such as entertainment, media, and technology. Their goals are primarily to gain notoriety and attract attention to their hacking capabilities rather than achieve traditional strategic or financial objectives. The targeting of well-known figures and major companies suggests a desire to demonstrate skill level and reach.

Enhanced Description

OurMine operates by compromising prominent social media accounts, often those of celebrities or major corporations. Their primary motivation appears to be gaining recognition for their abilities rather than financial gain or espionage. Known attacks include taking over the Twitter accounts of HBO shows, as well as accounts belonging to major companies and influential tech leaders. The group's activities typically involve unauthorized access followed by public announcements to claim responsibility, often with a flair for sensationalism.

Key Capabilities

  • Social engineering
  • Phishing
  • Credential dumping

MITRE ATT&CK Tactics

Credential Access
Discovery
Account Access Removal

ATT&CK Techniques

T1562.001
T1562.004
T1078

Software / Tooling

Social Engineering Toolkit (SET)
Custom scripts for credential dumping

Campaigns & Victims

OurMine has conducted multiple high-profile campaigns, including attacks on HBO and major tech companies. Their operational pattern involves quick compromises and subsequent claims via public channels, often using social media as a platform to announce their activities.

IOC Patterns

  • Compromise of high-profile accounts
  • Phishing attempts via DMs or emails
  • Posting credentials in paste sites

Recommended Actions

  • Monitor for unauthorized access to high-profile accounts
  • Implement strong account security measures
  • Educate employees on phishing and social engineering tactics

Suggested Tags

Hactivism
Social Engineering
Cyber Crime
Notoriety-seeking

Confidence Assessment

Confidence is moderate based on available data. OurMine's methods are well-documented through their own claims, but the lack of detailed technical analysis limits understanding of their full capabilities and toolset.

ATT&CK Techniques

No techniques linked yet.

Software / Tooling

No tools linked yet.

Campaigns / Victims

No campaigns linked yet.

Observed Data

No observed data linked yet.

Indicators of Compromise

No IOCs linked yet.

References

No references recorded yet.

Intel Summary

0

Techniques

0

Tools

0

Campaigns

0

IOCs

0

Observed Data

0

Tactics

Tags

Critical Infrastructure
Hactivism
Social Engineering
Cyber Crime
Notoriety-seeking

Details

Type
Unknown
Confidence
60%
Added
May 17, 2026
No notes yet. Click "Add Note" to create the first analysis note.
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.