Anonymous Sudan: neither anonymous nor Sudanese | Cybernews

HomeEditorial
Anonymous Sudan: neither anonymous nor Sudanese

Updated on: 22 June 2023
Vilius Petkauskas

Senior Journalist
Anonymous Sudan Russia

Microsoft Outlook, UPS, and Scandinavian Airlines all fell victim recently to attacks by the group known as Anonymous Sudan. However, experts we’ve spoken to believe the group is most likely a pro-Kremlin pet project for spreading a pro-Russian agenda.

Anonymous Sudan has been difficult to avoid recently. The group’s successful distributed denial-of-service (DDoS) attacks disrupted the website of Scandinavian Airlines (SAS) and even took down Microsoft 365 software suite, including Teams and Outlook.

While the gang is supposedly an anti-Western pro-Islam hacker collective, the group’s origins and modus operandi strongly point to Anonymous Sudan being a “Made in Russia” project with the kind of solid financial backing that regular hacktivists can seldom afford.

“KillNet are likely running this for someone else who is paying them. Since everything Anonymous Sudan does seems to fit the Kremlin’s narrative, we assume that it comes from Russia and is [supported by] someone in the Russian government, or at least someone in the sphere around the Russian leadership,” Mattias Wåhlén, a threat intelligence expert at Truesec told Cybernews.

Anonymous Sudan Killnet EU bank attacks
Anonymous Sudan’s message on joining with Killnet for an attack. Image by Cybernews.
Where did Anonymous Sudan come from?
Anonymous Sudan surfaced as a Russian-speaking Telegram channel in mid-January of this year. The gang took the moniker of a 2019 hacking operation by the original Anonymous collective, whose members quickly distanced themselves from the newcomer.

Initially, the group tried to capitalize on the furor surrounding instances of desecrating the Quran, which would fit the narrative of outraged hacktivists from a primarily Muslim country.

However, there’s also no provable link between Anonymous Sudan and the country of Sudan, Jeffrey Bardin, the chief intelligence officer at Treadstone 71, told Cybernews. The supposedly pro-Sudanese group’s posts mainly started in Russian and English, adopting Arabic only later.

“They align with Russia and will not attack any Russian site even though the Quran has been burned inside Russia. They attack anyone that has a Quran burning in their country as long as it is the West or Israel. All others get a pass,” Bardin explained.

https://cybernews.com/editorial/anonymous-sudan-explained/

https://cybercx.com.au/ | The reason for the attack: stop spreading rumors about us, and you must tell the truth and stop the investigations that we call the investigations of a dog | سبب الهجوم .. بطلوا تطلعوا عننا اشاعات و كلام كله كذب و وقفوا تحريات كلب العندكم
https://check-host.net/check-report/105ba8b3k8d3

Time of the attack is 30 minutes to an hour, just a warning | مدة الهجوم من 30 دقيقة الى ساعة ، مجرد تحذير

#AnonymousSudan