Sylhet Gang
Sylhet Gang is a hacktivist group referenced in reporting on multiple geopolitical cyber campaigns. In the provided content, it is identified as a pro-Pakistan or anti-India group active during cyber activity surrounding India’s Operation Sindoor, where it was named among groups that attempted to breach India’s cyberspace. The content also places Sylhet Gang among disruptive hacktivist groups active in the period following the U.S.-Israel military campaign against Iran, and notes that it amplified a DieNet warning threatening cyber-attacks against the United States if the U.S. joined the conflict against Iran. Across these contexts, the reporting associates the broader campaigns involving Sylhet Gang with disruptive operations, especially DDoS attacks; in the Israel-Iran context, the surrounding activity also included website defacements and claimed data breaches, though no unique TTPs are attributed specifically to Sylhet Gang in the provided material. Known alias in the content: sylhet_gang.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Where they target
Geographies tied to known operations.
- 🇮🇳 India
Where they're from
Attributed origin per open-source reporting.
- BD
Tradecraft
1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Hacktivist group named as participating in disruptive operations related to the conflict.
Hacktivist group involved in the pro-Iranian/pro-conflict hacktivist ecosystem; associated reporting characterizes activity as DDoS/defacement/claimed breaches with frequent exaggeration/disinformation.
Named among hacktivist groups involved in cyber operations against India during Operation Sindoor.
Hacktivist-led DDoS activity targeting India amid India-Pakistan conflict-related tensions.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.