Grupo hacktivista

Black Army Flag

Black Army Flag is a low-public-corroboration actor tracked through a Telegram identity that appears Arabic or Arab-world aligned, but origin remains unconfirmed. The profile should be maintained as a monitoring seed until public posts, channels, claims, alliances or technical artifacts provide stronger attribution.

This profile is written conservatively. Publicly visible posts, metadata, archives and claim material are sufficient to document actor posture, aliases, public messaging, relationship edges and likely role. They are not sufficient to validate every claimed compromise, exfiltration, exploit chain or real-world identity.

The actor should be handled as low-medium confidence. Claims of compromise must remain claim-level unless corroborated by victim telemetry, independent reporting, leaked-material validation, samples or infrastructure correlation.

Creado por iQBlack CTI Team
Colaboradores 1
Última actualización 2026-08-28

ATT&CK

MITRE ATT&CK

T1589Gather Victim Identity Information
T1591Gather Victim Org Information
T1593Search Open Websites/Domains