Nation Of Saviors
Nation Of Saviors appears to be a relatively recent hacktivist collective that became visibly active during 2024 and accelerated through 2025 into early 2026. Public reporting consistently places the group inside a broader pro-Palestinian and pro-Pakistan online militant ecosystem, with recurring anti-India targeting and later participation in anti-Israel and Gulf-focused campaigns. The group’s public behavior is heavily claim-driven and shaped by Telegram-native amplification.
The most consistently supported activity pattern is disruptive rather than stealthy. Public reporting links the group primarily to DDoS claims, periodic website defacement narratives, and a smaller number of data-leak or doxxing claims. The available record does not currently support treating Nation Of Saviors as a high-maturity intrusion actor with a well-documented proprietary malware stack. It is better modeled as a coalition-era hacktivist node that exploits political momentum, alliance branding, and symbolic target selection.
India-related operations are the strongest area of observable activity. Multiple public sources place the group among the more active participants in the 2025 anti-India hacktivist wave, with claims focused on defense, law enforcement, education, and e-governance targets. Additional public references tie the group to anti-Israel operations, including DDoS claims against Israeli organizations, and to coalition messaging around the broader “Axis” or “Electronic Operations Room” ecosystem that surfaced more aggressively in 2026.
Confidence is medium overall. Confidence is higher for ideological alignment, campaign participation, and the predominance of DDoS-style operations; lower for precise leadership, national origin, internal structure, and the authenticity or technical depth of some public breach claims.
ATT&CK
MITRE ATT&CK
Research