GINC-APT-0622 · Hacktivist

313 Team

Category
Hacktivist · Political or nationalist, often disruption and leaks.
Origin
Iraq(high confidence)
Sources
3 sources carry it
Identifier
GINC-APT-0622 · 313-team

What it is

313 Team is an Iraq-based threat actor that has conducted coordinated DDoS campaigns targeting multiple government servers in the UAE, Kuwait, and Romania, often in response to political statements. They have claimed responsibility for significant disruptions, including a one-hour shutdown of Romania’s National Tax Agency and an 18-hour outage of Kuwait's national e-government portal. The group has also engaged in website defacements, showcasing coordinated branding with other aligned groups. Their operations reflect a focus on government infrastructure, employing DDoS techniques and leveraging public political discourse as justification for their attacks.

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de