Hacktivism is the use of hacking and cyberattacks to promote political, social or ideological goals, rather than for financial gain.
How hacktivism works
Hacktivists choose targets for their symbolic value – governments, corporations, media or organisations they oppose – and favour attacks that attract attention:
- DDoS attacks that take websites offline, often with volunteers running shared tools;
- website defacement with political messages;
- data leaks and doxing of officials, police or company employees;
- hijacking social media accounts and, more rarely, sabotage of industrial systems.
Notable hacktivist groups
- Anonymous – a loose collective known for Project Chanology against the Church of Scientology (2008) and Operation Payback (2010) against payment companies that cut off WikiLeaks.
- LulzSec (2011) – breached Sony Pictures, PBS and other organisations before its members were arrested.
- IT Army of Ukraine, Killnet and NoName057(16) – groups that launched waves of DDoS attacks on opposite sides of the war in Ukraine from 2022.
Why hacktivism matters
Most hacktivist attacks cause short-term disruption, but leaks of personal data and attacks on infrastructure can do lasting harm. The line between activists and states is increasingly blurred: some “hacktivist” personas have been linked by researchers to state-sponsored APT groups that use them for deniable operations, a practice sometimes called “faketivism”. Participating in hacktivist attacks is a crime in most countries, whatever the motive.
How to defend
- Use DDoS protection and a CDN for public websites.
- Patch content management systems and protect admin panels with MFA.
- Monitor hacktivist channels for announced targets during geopolitical events.
Synonyms:
hacktivist
