Anonymous Sudan is a sub-group of the pro-Russian hacktivist group Killnet, a group with which Anonymous Sudan has publicly aligned itself since March 2023.
A bit of context is needed to understand the self designated Anonymous Sudan group. In May 2022, following the Russian invasion of Ukraine, Finland and Sweden applied to join NATO. Turkey, as a NATO member, voiced its opposition to include Sweden arguing Stockholm was helpling Kurdish organizations Ankara considers terrorist. Diplomatic negotiation went by to find a consensus.
Sekoia.io assess with confidence that in January 2023, when the swedish right-wing activist committed the mediatised anti-muslim act, Russian nationalist hacktivist groups such as Killnet identified an opportunity to undermine Swedish-Turkish negotiation on an islamophobic pretext, as Turkish president Erdogan often reacts on this subject. Killnet either created Anonymous Sudan or helped a preexisting unskilled group, to conduct and mediatise proxy DDoS operations on Sweden and later other NATO countries, to impact states that support Ukraine.
In an article published on “The Transportation sector cyber threat overview”, our TDR team discusses the characteristics of this attack technique used by Anonymous Sudan against Scandinavian air transport entities. For more information, click here: https://blog.sekoia.io/?p=6343&preview=1&_ppp=1bb270dfd9
