Anonymous Sudan — Hacktivist Profile
Since January 23, 2023, a threat actor identifying as "Anonymous Sudan" has been conducting denial of service (DDoS) attacks against multiple organizations in Sweden. This group claims to be "hacktivists," politically motivated hackers from Sudan. According to Truesec’s report, the threat actor has nothing to do with the online activists collectively known as Anonymous.Also tracked as
LameDuck, Storm-1359
IntelFusions coverage (1)
- Two Sudanese Nationals Charged as Anonymous Sudan DDoS Empire Dismantled After 35,000 Attacks 2026-02-16 · Cyber Incidents
Tools & malware
- Godzilla DDoS tool
- InfraShutdown DDoS tool
- Skynet (DCAT / Distributed Cloud Attack Tool) DDoS tool
Vendor research
- Inside LameDuck: analyzing Anonymous Sudan's threat operations Cloudflare (Cloudforce One)
- Microsoft Response to Layer 7 Distributed Denial of Service (DDoS) Attacks Microsoft Security Response Center (MSRC)
- Anonymous Sudan: Religious Hacktivists or Russian Front Group? Trustwave SpiderLabs
- US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers BleepingComputer
- Microsoft says Azure outage was caused by 'anomalous' traffic spike The Record (Recorded Future News)
- U.S. DOJ Indicts Hacktivist Group for DDoS Attacks CrowdStrike