3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
CGPLLNET NETWORK

CGPLLNET NETWORK

ID: 6c51ba61ddb47af6cced9cc005e4ebea78708
Hacktivist Group Hacktivism
Threat types: Hacktivism, Intrusion
Russia FIN, UKR
Updated: 2026-04-12
Created: 2026-02-25
Progress: 94% Completeness: 92% Freshness: 100%
Operation zone: Finland, Ukraine
Aliases Limited alias preview
CGPLLNET CGPLLNET Legion CG************** CG***********
Cy*********************************************** Гл***************************************** От************ —
Showing 2 of 7 aliases in free preview.
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: medium
Actor Techniques page ATT&CK® Diagram

CGPLLNET NETWORK is an OSINT-described Telegram-centric hacktivist/cybercrime-adjacent collective referenced in public reporting around the 2024 #FreeDurov/#OpDurov campaign. The primary observed activity is coordinated DDoS targeting and claim amplification via Telegram. Infrastructure is likely high-churn; defenders should prioritize surge resilience and telemetry-first claim validation over static blocklists.


Technique Technique name Tactics Evidence
T1498 Network Denial of Service TA0040
  • 2024-09-04 — Public reporting describes DDoS targeting in #FreeDurov campaign with CGPLLNET collaboration references. · ref
T1585.001 Social Media Accounts TA0042
  • 2026-02-25 — Telegram channels are used as the primary coordination surface in OSINT for CGPLLNET. · ref
T1585.002 Email Accounts TA0042
  • 2024-08-29 — KELA notes alliance/campaign messaging and participation recruitment shared via Telegram channels. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-03-06T18:18:13+00:00

CGPLLNET NETWORK - Centric Hacktivist/Cybercrime-Adjacent Collective

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for Decision Makers — CGPLLNET NETWORK


Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — CGPLLNET NETWORK


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-02-26T03:28:08+00:00

IOC Appendix — CGPLLNET NETWORK (Operational Seed Set)


More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-02-26T03:28:19+00:00

OSINT Library — CGPLLNET NETWORK


2024-09-04 — Check Point Research — “Hacktivists Call for Release of Telegram Founder with #FreeDurov DDoS Campaign (mentions CGPLLNET collaboration)”

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/11
Address Verification SOCMINT
t.me/cgp********* Restricted Not integrated
t.me/cgp************ Restricted Not integrated
t.me/wor************* Restricted Not integrated
t.me/inf********* Restricted Not integrated
t.me/cgp********* Restricted Not integrated
t.me/+wl************** Restricted Not integrated
t.me/cgp************* Restricted Not integrated
t.me/+7L************** Restricted Not integrated
t.me/ktc**** Restricted Not integrated
t.me/t.m*************************** Restricted Not integrated
Address Verification SOCMINT
telegra.ph/Tut****************************************** Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–6 of 6 images
Hacked resource Free Preview
Hacked resource
Hacked resource Free Preview
Hacked resource
Propaganda Free Preview
Propaganda
Propaganda Free Preview
Propaganda
Propaganda Free Preview
Propaganda
Logo Free Preview
Logo
Showing 4 of 6 images in preview mode. Additional evidence is restricted for Analyst and Premium plans.