Hacktivist group active since 2023 known for politically motivated DDoS attacks targeting Sweden and Denmark.
Anonymous Sudan is a threat actor active since January 23, 2023, claiming to be politically motivated hacktivists from Sudan, but Truesec reports no connection to the broader Anonymous collective. The group primarily targets organizations in Sweden and Denmark. Their main TTP is conducting DDoS attacks. Defenders should focus on strengthening DDoS mitigation capabilities for web-facing services and avoid attribution based solely on the group's claims.
Since January 23, 2023, a threat actor identifying as "Anonymous Sudan" has been conducting denial of service (DDoS) attacks against multiple organizations in Sweden. This group claims to be "hacktivists," politically motivated hackers from Sudan. According to Truesec’s report, the threat actor has nothing to do with the online activists collectively known as Anonymous.
Anonymous Sudan primarily conducts politically motivated DDoS attacks.
No, according to Truesec's report, the Anonymous Sudan group has no connection to the broader Anonymous collective.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.