Skip to main content
Live Webinar with SANS (June 25)— Agentic CTI Automation for Fun & ProfitRegister Free
Mallory

BD Anonymous Team

Also known asBD Anonymous Team

BD Anonymous Team is a hacktivist group identified in reporting on cyber activity surrounding the late February to early March 2026 Middle East escalation. The available content places the group among hacktivist actors active or claiming activity during 28 February–1 March 2026, a period in which open-channel monitoring recorded more than 150 claimed incidents. Reported hacktivist operations in this period were dominated by distributed denial-of-service (DDoS), website defacement, and claimed data-breach activity against government, financial, aviation, telecom, and critical-infrastructure targets. In the provided mention context, BD Anonymous Team targeted Qatar’s Ministry of Interior online services with DDoS activity and framed its actions around geopolitical grievances. No additional high-confidence attribution, sub-groups, or nation-state linkage is directly stated in the provided content. Known alias in the content: bd_anonymous_team.

Share:
Are they targeting you?

Know when an actor pivots toward your sector

Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.

OPERATIONAL PROFILE

Targeting

Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.

Where they target

Geographies tied to known operations.

  • 🇶🇦 Qatar
MITRE ATT&CK

Tradecraft

1 distinct technique observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.

1 of 15 tactics1 techniques×N= number of intelligence reports citing this technique
MITRE ATT&CK
TA0040
Impact
1 technique
T1498
Network Denial of Service
What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: sector and geo overlap with your footprint, the IOCs they’re burning right now, detection coverage, and what to do next.
Target overlap

Match sector + geo + tech-stack targeting against your real footprint.

Tradecraft mapping1

Every observed MITRE ATT&CK technique, grouped by tactic.

Malware arsenal

Families this actor is known to deploy, with IOCs and behavior.

Exploited CVEs

CVEs this actor has used in known campaigns.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Observables

Domains, IPs, and hashes tied to this actor, refreshed continuously.