3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
LulzSec Black

LulzSec Black

ID: a91574cbef345372987a7283acbcd09085649
Hacktivist Group Hacktivism
Threat types: Hacktivism, Intrusion
Unknown IND, ISR
Updated: 2026-04-16
Created: 2026-01-26
Progress: 90% Completeness: 85% Freshness: 100%
Operation zone: India, Israel
Aliases Limited alias preview
LulzSecBlack — — —
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: medium
Actor Techniques page ATT&CK® Diagram

LulzSec Black is a contemporary hacktivist brand active in the pro-Palestinian and anti-Israel campaign space on Telegram and allied channels. Public reporting ties it to OpJerusalem/OpIsrael style mobilization, solidarity messaging around Iran-linked narratives, and broader claim activity extending beyond Israel into Arab, European and U.S.-adjacent target sets.


Technique Technique name Tactics Evidence
T1583.006 Web Services TA0042
  • 2024-12-20 — Telegram-centric presence is part of the actor's public operating model. · ref
T1585.001 Social Media Accounts TA0042
  • 2024-12-20 — Public campaigns rely on Telegram channel identity, audience building and reposting. · ref
T1498 Network Denial of Service TA0040
  • 2024-12-20 — INFERENCE (confidence: medium): inclusion in OpJerusalem / OpIsrael mobilization strongly suggests DDoS participation or support. · ref
T1491.001 Internal Defacement TA0040
  • 2024-12-20 — INFERENCE (confidence: medium): campaign association and tag clusters indicate defacement-style claim activity in the same ecosystem. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-04-16T03:11:54+00:00

LulzSec Black

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Category: Hacktivism / Pro-Palestinian brand - Origin: Unknown / transnational online actor set

Author: iQBlack CTI Team


Executive Summary

LulzSec Black is a contemporary hacktivist brand active in the pro-Palestinian and anti-Israel campaign space on Telegram and allied channels. Public reporting ties it to OpJerusalem/OpIsrael style mobilization, solidarity messaging around Iran-linked narratives, and broader claim activity extending beyond Israel into Arab, European and U.S.-adjacent target sets.


Public reporting indicates that this actor or brand matters less because of bespoke technical sophistication than because of its position inside a wider mobilization, propaganda, ransomware, or coalition ecosystem.

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for CISO — LulzSec Black

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — LulzSec Black


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-04-16T03:09:50+00:00

IOC Appendix — LulzSec Black

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-04-16T03:10:46+00:00

OSINT Library — LulzSec Black


2025-03-26 — Radware — “OpIsrael 2025: Hacktivist Coordination Intensifies Ahead of April 7”

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/5
Address Verification SOCMINT
t.me/+mC************** Restricted Not integrated
t.me/Lul********* Restricted Not integrated
t.me/abu************** Restricted Not integrated
t.me/Lul************** Restricted Not integrated
t.me/Lul************* Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–2 of 2 images
Alliance with Liwaa Muhammad Free Preview
Alliance with Liwaa Muhammad
Logo Free Preview
Logo