Hacktivism: When Cyber Attacks Carry a Message

The 30-second explanation

Hacktivism is protest carried out with a keyboard instead of a placard. A group defaces a website, leaks documents, or floods a service with traffic to make its point, then makes sure everyone hears about it.

How it works

1. 1

   1. Cause

   A political or social issue drives the group to act.

2. 2

   2. Target

   An organisation seen as linked to that issue gets picked.

3. 3

   3. Action

   A defacement, a leak, or a traffic flood follows.

4. 4

   4. Announce

   The group publicises what it did, usually within hours.

Hacktivist groups tend to pick targets already tied to an issue in the news: a government agency, a company, an upcoming event. Because visibility is the whole point, they favour actions that are easy to see and easy to announce, and the groups themselves are often loosely organised, sometimes little more than a shared cause and a chat channel. Many of the attacks are technically simple but still genuinely disruptive. Defenders respond less with exotic tooling and more with the basics: protecting public-facing services, having a communications plan ready before it's needed, and checking claims carefully, since more than a few turn out to be exaggerated.

Real-world example

How to spot it

• Public posts naming your organisation

  Mentions turning up inside a protest campaign or a call to action.

• Traffic spikes hitting public sites

  A sudden surge of load on pages connected to something in the news.

• Content changing without a release

  Pages showing different text or images than the last known-good version.

• Claims of a leak doing the rounds

  Statements that need verifying before anyone reacts publicly.

What to do

1. 1Protect public websites with DDoS mitigation, regular patching, and strong administrative controls.
2. 2Monitor for mentions of your organisation whenever a relevant event is in the news.
3. 3Verify any claim before responding publicly, and have a communications plan ready in advance.