Individual threat actor

HIME666

Origin: Pakistan Status: Active Confidence: Confirmed

HIME666, also known as Himenisme666, is a cybercrime persona associated with large-scale database-leak claims, leak-forum publication, Telegram channels and an X identity. Public monitoring records claims involving Indonesia's civil-registration data, Indian medical data, a Swedish court administration and other organizations. The evidence reliably establishes the persona's publication and sales ecosystem, but the origin, full data authenticity and direct responsibility for each alleged intrusion remain unevenly verified.

Created by iQBlack CTI Team

Contributors 1

Last updated 2026-10-19

ATT&CK

MITRE ATT&CK

T1005Data from Local System

T1567.002Exfiltration to Cloud Storage

T1585.001Social Media Accounts

Research

Selected OSINT

T1585.001 — Social Media AccountsMITRE ATT&CK T1567.002 — Exfiltration to Cloud StorageMITRE ATT&CK T1005 — Data from Local SystemMITRE ATT&CK Himenisme666 country-threat recordVECERT deepdarkCTI Telegram threat-actor catalogGitHub