Alixsec is an emerging pro-hacktivist threat actor known for cyber sabotage operations driven by geopolitical and ideological agendas. The group emerged in early 2024, collaborating with other hacktivist factions like BhinnekaSec and AnonymousWorld. They differentiate themselves by targeting critical public infrastructure, with initial activity focusing on air transportation infrastructure across Europe and later expanding to include governmental, educational, media, and corporate entities in India. Alixsec also operates as part of broader hacktivist collectives such as the 'Holy League,' which aligns with anti-Western and pro-Russian sentiments.
Tecnicas MITRE
T1583.006, T1499.001, T1566.001
RansomLook pivots
Data, inteligencia y referencias externas para contrastar actividad ransomware del actor.