aDriv4

aDriv4 is a long-running web-intrusion persona with a public record extending from at least 2016 through 2026. Government and national CERT reporting documents repeated website defacements across Latin America, while CCN-CERT characterized aDriv4 as a highly active global defacer commonly exploiting vulnerable Joomla and later outdated WordPress installations.

Recent indexed compromised pages expose an aDriv4 Web SheLL interface that advertises private tooling and links directly to [Telegram identifier redacted]. This materially strengthens the technical profile from simple defacement toward server-side webshell operation and recurrent filesystem/command access.

Aliases supplied for this profile are Abo Al-EoS, ACvz, aDriv4 TooL, aDriv4vz and aDriv4z. Abo Al-EoS is publicly corroborated; the remaining variants are preserved as collection-context identifiers.