A Truesec investigation

Anonymous Sudan: Threat Intelligence Report

Truesec’s Threat Intelligence unit has investigated the threat actor group and its activities to help identify the true motives behind the attacks against Sweden.

The report (published on Feb 20, 2023) presents our conclusions and explains how the so-called "Anonymous Sudan" is most likely part of a Russian information operation to harm and disrupt Sweden's application for NATO.

Read the report to learn about:

What is the new Anonymous Sudan?
Analysis of OpSweden
Several indications of Russian ties
Timeline of events
Conclusions

THE TRUE MOTIVES BEHIND ANONYMOUS SUDAN

Exposing a Russian Information Operation

Since January 23, 2023, a threat actor group identifying as “Anonymous Sudan” has been conducting denial-of-service (DDoS) attacks against several Swedish organizations and critical infrastructure under the tag #OpSweden.

A Truesec Threat Intelligence analysis

Although the attacker group claims to be “hacktivists,” politically motivated hackers from Sudan, our recent investigation shows several indications that the attacks are, in fact, part of a Russian information operation. The true motive is most likely to create fear and uncertainty in Sweden and amplify outrage in Turkey at Paludan’s actions to complicate Sweden’s NATO application.