Also known as: Ghost Security
GhostSec is a hacktivist group that emerged as an offshoot of Anonymous. They primarily focused on counterterrorism efforts and monitoring online activities associated with terrorism. They gained prominence following the 2015 Charlie Hebdo shooting in Paris and the rise of ISIS.
Executive Summary
GhostSec is a hacktivist group emerging from Anonymous, focusing on counterterrorism and online surveillance post-2015 Paris attacks. They use cyber means to disrupt groups they oppose, with activities linked to specific domains and hashes indicating botnet C2 infrastructure.
Goals & Targeting
They aim to disrupt terrorist activities and promote transparency by targeting groups linked to terrorism or those aiding them. Typically targeting sectors related to security, media, and government entities that align with their counterterrorism goals.
Enhanced Description
GhostSec operates as a hacktivist collective primarily targeting entities associated with terrorism or opposing counterterrorism efforts. Known for DDoS attacks and data leaks, they leverage botnets to amplify their impact. Their tools include malware tracked through specific SHA-256 hashes and C2 servers hosted on particular IPs.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
Known for high-profile campaigns post-Paris attacks, with sustained activity targeting terrorism-associated groups. Campaigns often involve coordinated DDoS and data dumps to disrupt operations.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
High confidence in identifying GhostSec as a hacktivist group with counterterrorism motives. Some aspects like exact TTPs are uncertain.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
10
IOCs
0
Observed Data
0
Tactics