ZeroFox Intelligence Brief - Anonymous Sudan Announces Return in Telegram Group

ZeroFox Intelligence Flash Report - Anonymous Sudan Announces Return in Telegram Group

Product Serial: F-2025-03-10a

TLP:CLEAR

In this Flash Report, ZeroFox researchers report on a recent announcement on the messaging app Telegram, alluding to the return of hacktivist group Anonymous Sudan and a resumption of malicious cyber activity.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• In January 2025, ZeroFox observed a new Telegram channel claiming to be associated with the hacktivist collective Anonymous Sudan. According to posts made in the channel, the collective has resumed operations under the name “Anonymous Sudan Second Battalion”.
• Statements posted in the channel indicate the resurgence is very likely motivated by an intent to inflict punitive retribution against institutions perceived by the collective as opposed to the political policies of the Russian Federation, Palestinians, and Sudan.
• During January, the collective claimed to have conducted a number of distributed denial-of-service (DDoS) attacks targeting entities located in African nations (primarily Uganda and Libya).
• There is a likely chance that the new Telegram channel is reflective of a legitimate Anonymous Sudan resurgence. In such a case, there is a roughly even chance that the collective will resume the targeting of U.S., Europe, and Israel-based entities in the short to medium term.