US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

October 16, 2024 at 02:43PM

The U.S. Department of Justice indicted two Sudanese brothers, accused of running the hacktivist group Anonymous Sudan, responsible for over 35,000 DDoS attacks. Their actions disrupted critical services worldwide, including health facilities. The brothers face various charges, including conspiracy and reckless endangerment, which could lead to severe prison sentences.

**Meeting Notes Takeaways:**

1. **Indictment of Anonymous Sudan Operators**:
– The U.S. Department of Justice has unsealed an indictment against two Sudanese brothers, Ahmed Salah Yousif Omer (22) and Alaa Salah Yusuuf Omer (27), for operating the hacktivist group Anonymous Sudan.

2. **Nature and Impact of DDoS Attacks**:
– Anonymous Sudan is notorious for conducting over 35,000 DDoS attacks since its launch in 2023, targeting high-profile companies and essential services, including Microsoft, OpenAI, and government agencies.
– Notably impacted entities include Cedars-Sinai Hospital, where an attack led to the diversion of emergency services and patients.

3. **Motivations and Allegations**:
– The group ostensibly claims to target entities involved in Sudanese political interference. However, it has been speculated by researchers that they may have ties to Russia, operating under a false flag of Sudanese nationalism.

4. **Operational Characteristics**:
– Unlike traditional DDoS groups, Anonymous Sudan does not use compromised devices for attacks but instead employs tools like the Skynet Botnet and DCAT, which utilize open proxies to overwhelm targeted servers.

5. **Legal Proceedings and Charges**:
– The indictment includes charges of conspiracy to damage protected computers, with Ahmed Omer facing additional charges for damaging protected computers and a potential life sentence for reckless endangerment related to the hospital attack.

6. **Current Status of Suspects**:
– The suspects have been in custody since March when their operations were disrupted. They are not in U.S. custody but have been interviewed by the FBI.

7. **Ongoing Investigations**:
– The investigation into Anonymous Sudan and DDoS activities continues under Operation PowerOff, with efforts focused on dismantling their operational infrastructure.

This summation highlights the key points for understanding the recent developments regarding Anonymous Sudan and the implications of their cyber activities.

Full Article