The notorious hacktivist group, Anonymous Sudan, has made a significant shift in their operational tactics, moving away from their previous use of the Skynet Botnet to employing a new DDoS-for-hire service called Anonymous Sudan Infrashutdown. This revelation was made public by Crush, the group’s spokesperson, during an interview with Cyberknow. The group claims to have been utilizing the Infrashutdown service for several weeks before the announcement, during which they successfully disrupted various organizations and launched cyberattacks on a global scale.
The transition to Infrashutdown marks a strategic pivot for Anonymous Sudan, as they aim to expand their disruptive capabilities while maintaining anonymity and operational security. In a Telegram post, the group initiated a donation campaign, seeking financial support for the first time. This move indicates a departure from their typical reliance on alleged financial backers to sustain their operations, especially with the high costs associated with using paid botnets.
Anonymous Sudan introduced the Infrashutdown service in a post on February 24th, highlighting its capabilities in offering customized DDoS campaigns targeting government agencies, private businesses, and individuals. The service’s features include a global reach, adaptability to specific sectors, and a proven track record of success in targeting ISPs, universities, and data centers across various countries.
Privacy and security are paramount with Infrashutdown, with the service guaranteeing confidentiality and untraceability for its clients. Additionally, the service offers flexibility in campaign scale and budget, allowing for engagements ranging from budget-friendly skirmishes to record-setting terabit assaults.
Despite claiming to be from Sudan, cybersecurity experts have traced the origins of Anonymous Sudan to Russian cybercriminal networks like KillNet. Researchers have debunked their association with the global Anonymous collective, identifying Russian ties through their use of Telegram and communication in English and Russian. The group’s use of paid infrastructure suggests significant financing, possibly from Russian government circles, raising concerns about their true identity and motives.
In conclusion, Anonymous Sudan’s adoption of the Infrashutdown service signifies a new chapter in their digital activism and cyber warfare efforts. The group’s ability to adapt and evolve in their operational tactics underscores the ever-changing landscape of cybersecurity threats. As they continue to disrupt organizations and launch cyberattacks globally, their actions raise important questions about the motivations and implications of hacktivist groups in the digital age.