Loading threat actor…
Cyb3rDrag0nzz is a pro-Iran, resistance-branded hacktivist group active within the broader Cyber Islamic Resistance ecosystem. It is also referenced as cyb3r_drag0nzz and Cyb3r Drag0nz Team. The group has been identified as a coalition participant that contributes primarily distributed denial-of-service activity, website defacements, and propaganda amplification in coordinated campaigns alongside other aligned hacktivist teams. The group has been associated with joint operations targeting Israeli websites, including defacement activity conducted under coalition branding. Reporting also indicates it shifted to targeting Saudi entities under direction from the broader coordinating structure. Within the coalition, Cyb3rDrag0nzz appears to function as a lower-sophistication but operationally useful participant whose value comes from rapid mobilization, symbolic disruption, and amplification of allied campaigns rather than advanced intrusion tradecraft. Cyb3rDrag0nzz has been named alongside groups such as 313 Team, RipperSec, Dark Storm Team, Keymous+, Conquerors Electronic Army, DieNet, and other pro-Iran or pro-resistance hacktivist actors that coordinate through shared target lists, synchronized messaging, and mutual promotion of attack claims. Its observed activity is consistent with the coalition’s common methods: disruptive DDoS operations, website defacement, and information operations intended to create psychological pressure and public visibility around regional conflict.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
7 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Part of the pro-Iran coalition, contributing primarily DDoS activity and propaganda amplification.
Hacktivist defacement-focused group attacking Israeli and Saudi web properties under coalition direction.
Hacktivist group participating in the Cyber Islamic Resistance operations room and claiming website defacements against Israeli targets.
Named hacktivist team operating under/with the Cyber Islamic Resistance umbrella in support of pro-Iranian operations.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.