3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
ZxS3C

ZxS3C

ID: dc46789745b84969ee7f874fe9f8412825790
Hacktivist Group Hacktivism
Threat types: Hacktivism, Defacement, Intrusion
Cambodia THA
Updated: 2026-03-14
Created: 2026-02-19
Progress: 81% Completeness: 85% Freshness: 70%
Operation zone: Thailand
Aliases Limited alias preview
Z3 — — —
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: low
Actor Techniques page ATT&CK® Diagram

ZxS3C (alias: Z3) is a small, Telegram-centric hacktivist identity linked via public alliance announcements and Thailand-focused disruption narratives in adjacent Telegram ecosystems.


Technique Technique name Tactics Evidence
T1585.001 Social Media Accounts TA0042
  • 2026-02-19 — ZxS3C maintains a public Telegram channel handle (@ZxS3xx) used for identity signaling and audience aggregation. · ref
T1584 Compromise Infrastructure TA0042
  • 2025-12-28 — INFERENCE (confidence: low): Alliance-linked posts and target shout-outs imply attempts to affect third-party websites; no independent confirmation of compromise was observed in the OSINT reviewed. · ref
T1491.001 Internal Defacement TA0040
  • 2026-02-19 — INFERENCE (confidence: medium): Adjacent cluster posts use 'TOUCH BY' + target URL patterns consistent with web defacement claim culture; ZxS3C appears in the same hashtag ecosystem (#zxs3c). · ref
T1498 Network Denial of Service TA0040
  • 2026-02-19 — INFERENCE (confidence: low): Thailand-focused clusters in the same ecosystem frequently reference DDoS activity and check-host links; ZxS3C may be adjacent/affiliated rather than a confirmed operator of DDoS campaigns. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-02-20T04:31:46+00:00

ZxS3C — Hacktivist cluster (alias: Z3)

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for Decision Makers — ZxS3C (alias: Z3)


Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — ZxS3C (alias: Z3)


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-02-20T04:32:56+00:00

IOC Appendix (TLP:WHITE) — ZxS3C (alias: Z3)


More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-02-20T04:33:21+00:00

OSINT Library — ZxS3C (alias: Z3)


2026-02-19 — Telegram — "ZxS3C — Telegram channel landing page (@ZxS3xx)"

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/1
Address Verification SOCMINT
t.me/ZxS*** Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–1 of 1 images
Image used in social media account Free Preview
Image used in social media account