Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
List of hacker groups
open-in-new
<p>This is a partial list of notable <a href="/facts/Hacker_group/pPu6k66C">hacker groups</a>, in alphabetical order: </p> <ul><li><a href="/facts/Anonymous_(hacker_group)/Qm7Nqlro">Anonymous</a>, originating in 2003, Anonymous was created as a group for people who fought for the right to privacy.</li> <li><a href="/facts/Anonymous_Sudan/1qJ4cHFm">Anonymous Sudan</a>, founded in 2023, a <a href="/facts/Hacktivism/Pf2eep2m">hacktivist</a> group that claims to act against <a href="/facts/Anti-Muslim/wKl2N81a">anti-Muslim</a> activities, but allegedly is Russian backed and neither linked to <a href="/facts/Sudan/yGeaNdvS">Sudan</a> nor <a href="/facts/Anonymous_(hacker_group)/Qm7Nqlro">Anonymous</a>.</li> <li><a href="/facts/Bangladesh_Black_Hat_Hackers/gGjt4T20">Bangladesh Black Hat Hackers</a>, founded in 2012.</li> <li><a href="/facts/Chaos_Computer_Club/XwXLlA5F">Chaos Computer Club</a> (CCC), founded in 1981, it is Europe's largest association of hackers with 7,700 registered members.</li> <li><a href="/facts/Conti_(ransomware)/oHg79nr3">Conti</a> one of the most prolific ransomware groups of 2021, according to the <a href="/facts/FBI/UY93jwX6">FBI</a>.</li> <li><a href="/facts/Cozy_Bear/wvCz5DcB">Cozy Bear</a>, a Russian hacker group believed to be associated with one or more intelligence agencies of Russia.</li> <li><a href="/facts/Croatian_Revolution_Hackers/n4FMybMv">Croatian Revolution Hackers</a>, a now-defunct group of <a href="/facts/Croatia/MSS0yyvw">Croatian</a> hackers credited with one of the largest attacks to have occurred in the <a href="/facts/Balkans/5Hy8ly0d">Balkans</a>.</li> <li><a href="/facts/Cult_of_the_Dead_Cow/Q0zQ0RTA">Cult of the Dead Cow</a>, also known as cDc or cDc Communications, is a computer hacker and DIY media organization founded in 1984 in <a href="/facts/Lubbock%2c_Texas/R4qGfRd5">Lubbock, Texas</a>.</li> <li><a href="/facts/Cyber_Partisans/sRd6fqoE">Cyber Partisans</a>, a <a href="/facts/Belarusians/GXQdoLqy">Belarusian</a> hacktivist group that emerged in 2020, that performed attacks on the <a href="/facts/Government_of_Belarus/XMEnI24s">Belarusian government</a> and governmental agencies.</li> <li><a href="/facts/DarkSeoul/lLpTS2Al">DarkSeoul</a>, a cyber attack group believed to be North Korean-backed, known for destroying data and disrupting networks in South Korea from 2011-2013, targeting banks, media outlets, and government agencies using malware and wiper attacks to cause damage.</li> <li><a href="/facts/DarkSide_(hacker_group)/Xo9k5jKN">DarkSide</a>, a cybercriminal hacking group, believed to be based in <a href="/facts/Eastern_Europe/f5CDGzNA">Eastern Europe</a>, that targets victims using ransomware and extortion.</li> <li><a href="/facts/DCleaks/ms1SgNw9">DCLeaks</a>, claims to be a group of "American hacktivists (though indicted individuals were found to be in <a href="/facts/Russia/jfkCwyxn">Russia</a>) who respect and appreciate freedom of speech, human rights and government of the people."</li> <li><a href="/facts/Decocidio/9qccLpcU">Decocidio</a> is an anonymous, autonomous collective of hacktivists who are part of <a href="/facts/Earth_First!/eNy8oKLh">Earth First!</a>, a radical environmental protest organization, and adheres to <a href="/facts/Climate_Justice_Action/nyDbP34Y">Climate Justice Action</a>.</li> <li><a href="/facts/Derp_(hacker_group)/KjHLs1ST">Derp</a>, a hacker group that attacked several game sites in late 2013.</li> <li><a href="/facts/Digital_DawgPound/9qvPMsQW">Digital DawgPound</a> (DDP) The DDP was founded and named by <a href="/facts/StankDawg/LmedF4Rt">StankDawg</a>.</li> <li><a href="/facts/Equation_Group/D85fJSey">Equation Group</a>, suspected to be the offensive operations wing of the U.S. <a href="/facts/National_Security_Agency/Sg6MGV1o">National Security Agency</a>.</li> <li><a href="/facts/Fancy_Bear/DmtYNLGu">Fancy Bear</a>, a Russian cyberespionage group.</li> <li><a href="/facts/Genocide2600/DsYhP4TD">Genocide2600</a>, a group that gained notoriety for combating <a href="/facts/Child_pornography/6wgSAcnP">child pornography</a>. Disbanded in 2009.</li> <li><a href="/facts/Ghost_Squad_Hackers/15kbBAh6">Ghost Squad Hackers</a>, or by the abbreviation "GSH" is a politically motivated hacking team established in 2015.</li> <li><a href="/facts/Global_kOS/fRqQjn1P">Global kOS</a> was a grey hat (leaning black hat) computer hacker group active from 1996 through 2000.</li> <li><a href="/facts/GlobalHell/vAEYvuAP">globalHell</a> was a group of hackers, composed of about 60 individuals. The group disbanded in 1999 when 12 members were prosecuted for computer intrusion and 30 for lesser offenses.</li> <li><a href="/facts/Goatse_Security/DPI0Ml8j">Goatse Security</a> <a href="/facts/Goatsec/DPI0Ml8j">(GoatSec)</a> is a loose-knit, nine-person <a href="/facts/Grey_hat/bn3qtbe8">grey hat</a> hacker group that specializes in uncovering security flaws.</li> <li><a href="/facts/Hackweiser/2hB3RM7F">Hackweiser</a> is an underground hacking group and hacking magazine founded in 1999.</li> <li><a href="/facts/Hafnium_(group)/WmvWI7ul">Hafnium</a> Possibly with Chinese associations, responsible for the <a href="/facts/2021_Microsoft_Exchange_Server_data_breach/Pws7umsW">2021 Microsoft Exchange Server data breach</a>.</li> <li><a href="/facts/Hive_(ransomware)/lyUwgv04">Hive</a> was a notorious <a href="/facts/Ransomware_as_a_service/bksSpLPx">ransomware as a service</a> (RaaS) criminal organization that targeted mainly public institutions.</li> <li><a href="/facts/Honker_Union/BcFlL0jm">Honker Union</a> is a group known for <a href="/facts/Hacktivism/Pf2eep2m">hacktivism</a>, mainly present in <a href="/facts/Mainland_China/HFXJcUky">Mainland China</a>, whose members launched a series of attacks on websites in the United States, mostly government-related sites.</li> <li><a href="/facts/Indian_Cyber_Force/n3WhRxYu">Indian Cyber Force</a> is a hacktivist group that targets entities perceived to be against Indian interests. Notable incidents include cyberattacks against Canada, Maldives, Palestine, Pakistan.</li> <li><a href="/facts/International_Subversives/EdwEl8fV">International Subversives</a> was a group of three hackers including <a href="/facts/Julian_Assange/EdwEl8fV">Julian Assange</a> under the name <i>Mendax</i>, supposedly taken from <a href="/facts/Horace/8NQn78B9">Horace</a>'s <i>splendide mendax</i> (nobly lying) and two others, known as "Trax" and "Prime Suspect" who regularly hacked into corporations like <a href="/facts/Nortel/VYJnskS6">Nortel</a> and systems belonging to a "who's who of the U.S. <a href="/facts/Military%25E2%2580%2593industrial_complex/kII2vzyQ">military-industrial complex</a>".</li> <li><a href="/facts/Iranian_Cyber_Army/9fVoxKGR">Iranian Cyber Army</a> unofficially confirmed to be connected to government.</li> <li><a href="/facts/Islamic_State_Hacking_Division/yAqu08kh">Islamic State Hacking Division</a>, a Jihadist hacking group associated with the <a href="/facts/Islamic_State/1307qum3">Islamic State</a>.</li> <li><a href="/facts/IT_Army_of_Ukraine/QWMna9l3">IT Army of Ukraine</a> is a volunteer cyberwarfare organisation created amidst the <a href="/facts/2022_Russian_invasion_of_Ukraine/TTeQCgSl">2022 Russian invasion of Ukraine</a>.</li> <li><a href="/facts/Killnet/tdXo9Rbs">Killnet</a> is a pro-Russian group that attacked several countries' government institutions and attempted to <a href="/facts/DDoS/6nkoK02J">DDoS</a> the <a href="/facts/2022_Eurovision_Song_Contest/nswQahxK">2022 Eurovision Song Contest</a> website.</li> <li><a href="/facts/L0pht/62NNavoQ">L0pht</a>, was a hacker collective active between 1992 and 2000 and located in the <a href="/facts/Boston%2c_Massachusetts/exjfn6xf">Boston, Massachusetts</a> area.</li> <li><a href="/facts/Lapsus%24/suPh0fHB">Lapsus$</a>, a black-hat hacker group known for using extortion tactics. active since late 2021, allegedly dumping data from <a href="/facts/Microsoft/nGIDDXdx">Microsoft</a>, <a href="/facts/Samsung/oNXUwDjn">Samsung</a> and <a href="/facts/Nvidia/8QfCgqbu">Nvidia</a>, and with members arrested in March 2022.</li> <li><a href="/facts/Lazarus_Group/8xGUWGu0">Lazarus Group</a>, with strong links to the North Korean government, involved in the <a href="/facts/Sony_Pictures_hack/Xh7UTKqo">Sony Pictures hack</a>, the <a href="/facts/Bangladesh_Bank_robbery/zjASUhXB">Bangladesh Bank robbery</a> and the <a href="/facts/WannaCry_ransomware_attack/zIvlf4jn">WannaCry ransomware attack</a>.</li> <li>LazurGroup, also known as 3117, was founded in early 2025. The hacker group quickly rose to prominence after breaching major corporations, well-known brands, and even government institutions.</li> <li><a href="/facts/Legion_of_Doom_(hacking)/ba2csDkQ">Legion of Doom</a>; LOD was a hacker group active in the early 80s and mid-90s. Had noted rivalry with Masters of Deception (MOD).</li> <li><a href="/facts/Legion_Hacktivist_Group/URdLjrde">Legion Hacktivist Group</a>, a hacking group that hijacked the Indian Yahoo server and hacked online news portals of India.</li> <li><a href="/facts/Level_Seven_(hacking_group)/krlc9ILC">Level Seven</a> was a hacking group during the mid to late 1990s. Eventually dispersing in early 2000 when their nominal leader "vent" was raided by the FBI on February 25, 2000.</li> <li><a href="/facts/Lizard_Squad/EspdTDUD">Lizard Squad</a>, known for their claims of <a href="/facts/Denial-of-service_attack/6nkoK02J">distributed denial-of-service</a> (DDoS) attacks primarily to disrupt gaming-related services. Currently broken up.</li> <li><a href="/facts/Lords_of_Dharmaraja/LxSD2DSX">Lords of Dharmaraja</a>, an India based <a href="/facts/Security_hacking/4bAJ9F1A">security hacking</a> group which threatened in 2012 to release the <a href="/facts/Source_code/o9J6Jv23">source code</a> of <a href="/facts/NortonLifeLock/uWvBqako">Symantec</a>'s product <a href="/facts/Norton_Antivirus/y8aWpPhj">Norton Antivirus</a>.</li> <li><a href="/facts/LulzSec/HFa35zJF">LulzSec</a>, a group of hackers originating and disbanding in 2011 that claimed to hack "for the lulz".</li> <li><a href="/facts/Masters_of_Deception/rhBwYaUF">Masters of Deception</a>, MOD's initial membership grew from meetings on Loop-Around Test Lines in the early- to mid-1980s. Had noted rivalry with Legion of Doom (LOD).</li> <li><a href="/facts/Milw0rm/tozoBvK9">milw0rm</a> is a group of "hacktivists" best known for penetrating the computers of the Bhabha Atomic Research Centre (BARC) in Mumbai.</li> <li><a href="/facts/Network_Crack_Program_Hacker_(NCPH)_Group/VqYfys2e">NCPH</a> is a Chinese hacker group based out of Zigong in Sichuan Province.</li> <li><a href="/facts/Noisebridge/SLBSIWNt">Noisebridge</a>, a <a href="/facts/Hackerspace/acq7e6hb">hackerspace</a> located in <a href="/facts/San_Francisco/cb9l7hbC">San Francisco</a> which goes by the early definition of <a href="/facts/Hacker_culture/8ww6P79y">hacking</a> and not <a href="/facts/Security_hacking/4bAJ9F1A">security hacking</a>.</li> <li><a href="/facts/Noname057(16)/wPnjGKT2">Noname057(16)</a> a Russian speaking hacker group, attacks aligned with Russia's invasion in Ukraine</li> <li><a href="/facts/OurMine/cwjLhmnW">OurMine</a>, a hacker group of unknown origin that has compromised various websites and Twitter accounts as a way of advertising their "professional services".</li> <li><a href="/facts/P.H.I.R.M./WPDtTyC7">P.H.I.R.M.</a>, an early hacking group that was founded in the early 1980s.</li> <li><a href="/facts/Phone_Losers_of_America/nTTjgf8v">Phone Losers of America</a>, an internet <a href="/facts/Prank_call/oVYYag73">prank call</a> community founded in 1994 as a <a href="/facts/Phone_Phreaking/3Ldta7fW">phone phreaking</a> and <a href="/facts/Phone_hacking/ku7maxP2">hacking</a> group.</li> <li><a href="/facts/Play_(hacker_group)/BNF5lcul">Play</a>, a ransomware extortion group, experts believe them to be from <a href="/facts/Russia/jfkCwyxn">Russia</a>.</li> <li><a href="/facts/Powerful_Greek_Army/bEt2prCG">Powerful Greek Army</a>, is a Greek group of black-hat computer hackers founded in 2016.</li> <li><a href="/facts/RedHack/GHoDXGnM">RedHack</a> is a socialist hacker group based in Turkey, founded in 1997. They usually launch attacks against the Turkish government's websites and leak secret documents of the Turkish government.</li> <li><a href="/facts/Rhysida_(hacker_group)/jcsGKmsn">Rhysida</a> group behind the <a href="/facts/2023_British_Library_cyberattack/Ez1bxQpR">2023 British Library cyberattack</a> and the <a href="/facts/Insomniac_games/PDTft82r">Insomniac games</a> dump using ransomware-as-a-service.</li> <li><a href="/facts/Rocket_Kitten/LrfCVkrL">Rocket Kitten</a> or the Rocket Kitten Group is a hacker group thought to be linked to the <a href="/facts/Government_of_the_Islamic_Republic_of_Iran/3a2xqGM0">Iranian government</a>. Formed in 2010 by the hacker personas "Cair3x" and "HUrr!c4nE!".</li> <li><a href="/facts/Sandworm_(hacker_group)/WU1EHq3v">Sandworm</a>, also known as Unit 74455, a Russian cyber military unit of the <a href="/facts/GRU_(G.U.)/V1cWjcC6">GRU</a>.</li> <li><a href="/facts/The_Shadow_Brokers/mytpjIqP">The Shadow Brokers</a> (TSB), originating in summer 2016. They published several leaks containing hacking tools, including several <a href="/facts/Zero-day_(computing)/B1jJkD0C">zero-day exploits</a> of the National Security Agency (NSA).</li> <li><a href="/facts/ShinyHunters/1KKYf4cS">ShinyHunters</a> is a Hacker Group that is said to be responsible for numerous <a href="/facts/Data_breach/xGxRFY1A">data breaches</a> in 2020 and 2021.</li> <li><a href="/facts/SiegedSec/bj3R50Ye">SiegedSec</a>, founded in 2022, a <a href="/facts/Hacktivism/Pf2eep2m">hacktivist</a> group known for its <a href="/facts/Political_dissent/fRsXQsm6">anti-government</a> and <a href="/facts/LGBTQ%252B/WhVPgNDn">LGBTQ+</a>-supportive stance, often targeting U.S. government agencies, law enforcement, and right-wing institutions.</li> <li><a href="/facts/TeaMp0isoN/E7CKLtXk">TeaMp0isoN</a> is a group of black-hat computer hackers established in mid-2009.</li> <li><a href="/facts/Telecomix/TXj66fW2">Telecomix</a>, a <a href="/facts/Hacktivism/Pf2eep2m">hacktivist</a> group mainly known for circumventing <a href="/facts/Internet_censorship/938thaNE">internet censorship</a> during multiple political events.</li> <li><a href="/facts/TeslaTeam/WVIfacdd">TeslaTeam</a> is a group of black-hat computer hackers from Serbia established in 2010.</li> <li><a href="/facts/TESO_(Austrian_hacker_group)/XrzRHPe5">TESO</a> was a hacker group originating in <a href="/facts/Austria/4qWIMIyc">Austria</a> that was active primarily from 1998 to 2004.</li> <li><a href="/facts/The_Unknowns/DU7mXozG">The Unknowns</a> is a group of white-hat hackers that exploited many high-profiled websites and became very active in 2012 when the group was founded and disbanded.</li> <li><a href="/facts/Turla_(group)/1j5Yo9WQ">Turla</a> one of the most sophisticated groups supporting the Russian government.</li> <li><a href="/facts/UGNazi/Eepxw2DK">UGNazi</a>, a hacking group led by JoshTheGod, was founded in 2011. They are best known for several attacks on US government sites, leaking WHMC's database, DDoS attacks, and exposing personal information of celebrities and other high-profile figures on <a href="/facts/Exposed.su/mLE5Ckxw">exposed.su</a>.</li> <li><a href="/facts/Vice_Society/VY8Rvm1Q">Vice Society</a>, a Russian-speaking hacker group known for attacks on healthcare and education organizations</li> <li><a href="/facts/Wizard_Spider/R60Sb5da">Wizard Spider</a> Russian / Ukrainian hacker group, suspected of being behind the Ireland <a href="/facts/Health_Service_Executive_cyberattack/r6eRVgDv">Health Service Executive cyberattack</a>, sometimes called <a href="/facts/Trickbot/t8p2rAIY">Trickbot</a> per the malware.</li> <li><a href="/facts/Yemen_Cyber_Army/TrNXYC9v">Yemen Cyber Army</a>, a pro-<a href="/facts/Yemeni/eDyoh4qV">Yemeni</a> hacker group that has claimed responsibility for the <a href="/facts/Website_defacement/5mwhFh3p">defacement</a> of the <a href="/facts/London/KozCCsy9">London</a>-based pro-<a href="/facts/Saudi_Arabia/uyUpe1J2">Saudi</a> <a href="/facts/Al-Hayat/FVVvstSA">Al-Hayat</a> website in April 2015, as well as the exfiltration of data from the <a href="/facts/Ministry_of_Foreign_Affairs_(Saudi_Arabia)/VrDWyaVf">Saudi Arabia's Ministry of Foreign Affairs</a> in May subsequently listed on <a href="/facts/WikiLeaks/rm4lC2cD">WikiLeaks</a>.</li> <li><a href="/facts/Youth_International_Party/cXsKCJzC">YIPL/TAP</a> - <i>Youth International Party Line</i> or <i>Technological Assistance Program</i>, was an early <a href="/facts/Phone_phreak/3Ldta7fW">phone phreak</a> organization and publication created in the 1970s by activists <a href="/facts/Abbie_Hoffman/a7ajznE6">Abbie Hoffman</a>.</li> <li><a href="/facts/Xbox_Underground/NeS8t0FN">Xbox Underground</a>, an international group responsible for hacking game developers, including <a href="/facts/Microsoft/nGIDDXdx">Microsoft</a>.</li> <li><a href="/facts/UNC1151/4un4bWGk">UNC1151</a>, believed to be based in Belarus.</li></ul>