A Truesec investigation
Anonymous Sudan: Threat Intelligence Report

Since January 23, 2023, a threat actor group identifying as “Anonymous Sudan” has been conducting denial-of-service (DDoS) attacks against several Swedish organizations and critical infrastructure under the tag #OpSweden.
Although the attacker group claims to be “hacktivists,” politically motivated hackers from Sudan, our recent investigation shows several indications that the attacks are, in fact, part of a Russian information operation. The true motive is most likely to create fear and uncertainty in Sweden and amplify outrage in Turkey at Paludan’s actions to complicate Sweden’s NATO application.
Truesec’s Threat Intelligence unit has investigated the threat actor group and its activities to help identify the true motives behind the attacks against Sweden.
The report (published on Feb 20, 2023), presents our conclusions and explains how the so-called "Anonymous Sudan" most likely is part of a Russian information operation to harm and disrupt Sweden's application for NATO.