Ghost Squad Hackers

Ghost Squad Hackers (GSH) is a politically motivated hacktivist collective historically associated with the broader Anonymous ecosystem and publicly represented by the alias s1ege. Its strongest documented activity spans DDoS campaigns, unauthorized access to public web servers, external defacement and selected data-leak claims against governments, banks and other symbolic targets.

Operation Icarus in 2016 established GSH as a participant in coordinated anti-banking DDoS activity. Later incidents include Sudan-related disruption claims, repeated Indian government web compromises, mass government-site defacements in Zimbabwe and compromise of European Space Agency web resources.

Current operational continuity is less well established than the 2016–2020 peak. Historical GSH infrastructure, identities and TTPs remain valuable for attribution and defensive planning, but should not be treated as automatically active in 2026.