Threat Intelligence Tarot
Vol. II · 142
Hacktivist (international, decentralized)
★★★★★
risk 2/5
✦ The Pride Banner ✦
SiegedSec
GhostSec-adjacent (separate from in-deck GhostSec) · Furry Pride
US state governmentsAnti-LGBT legislation backersNATO portalsCritical research facilities
Active 2022-2024 · LGBTQ+ rights advocacy, Ideological protest, Notoriety
The Pride Banner waved itself across servers belonging to states it accused of erasing identity. Its rhetoric was loud; its operational discipline, conspicuously short. Defiance and disbandment came in the same flag-colored typeface.
Tactics & Techniques
RCN
RDV
INI
EXC
PRS
PRV
EVA
CRD
DSC
LAT
COL
C2
EXF
IMP
Notable Operations
- ◆Idaho National Laboratory employee data leak (November 2023)
- ◆NATO unclassified portal data dump (2023)
- ◆State government breaches in response to anti-LGBT legislation
- ◆Group disbandment announcement (July 2024)
Defenses
- ▸Public-sector attack surface management and continuous CVE prioritizationCISA KEV Catalog
- ▸Sensitive employee data minimization at national laboratoriesDOE M 470.4-7
- ▸Ideological-cluster threat tracking distinct from APT trackingNIST CSF: ID.RA ↗
- ▸Coordinated takedown collaboration with hosting providersNIST CSF: RS.CO ↗
Reversed: Their Weakness
Hacktivist longevity is inversely proportional to public bravado. Defenders who treat short-lived ideological clusters as discrete waves — rather than persistent threats — allocate resources more accurately.
Share this adversary profile
Compare →swipe to browse
Related Adversaries
Data sourced from MITRE ATT&CK. For educational purposes.