Threat Actor Characterization
ShadowClawZ
ID: a360c188ba509a1488606a34793f2d2d85223| Shadow ClawZ 404 | ShadowClawZ404 | — | — |
Actor Network Graph
Open Network GraphShadowClawZ
Classification: TLP:WHITE - Open Source Intelligence (OSINT)
Category: Hacktivism / Unattributed online collective - Origin: Unknown
Author: iQBlack CTI Team
Executive Summary
As of 2026-02-21, no reliable, uniquely attributable open-source reporting was identified that conclusively profiles a threat actor branded as “ShadowClawZ” in a way that meets evidentiary standards for this dossier. Consequently, this profile is intentionally conservative and should be treated as a placeholder pending validated OSINT, incident telemetry, or vetted vendor/LE reporting.
INFERENCE (confidence: low): “ShadowClawZ” may represent a short-lived handle, a rebrand, a small subgroup within a broader hacktivist ecosystem, or an alias used opportunistically across multiple campaigns. Without stable indicators (channels, infrastructure, campaigns, targets), attribution and TTP mapping cannot be asserted.