Hacktivist group

Horus Team

Horus Team is an OSINT-observed hacktivist brand appearing in public coalition lists tied to pro‑Russian disruptive campaigns, primarily focused on denial‑of‑service activity and public claim amplification.

Public reporting most consistently places Horus Team as a member of the ‘High Society’ hacktivist alliance and as a named partner in alliances announced by NoName057(16), a Russia‑linked DDoS collective that operationalized the ‘DDoSia’ volunteer model.

Direct, independently verified victim attributions attributable solely to Horus Team remain sparse in open reporting; confidence is higher at the coalition/umbrella level (High Society / NoName057(16) partner lists) than at the single‑actor incident level.

Assessment: Horus Team should be treated as a coalition-associated capability for disruptive DDoS and narrative operations rather than a standalone, well-documented intrusion set.

INFERENCE (confidence: medium): the brand likely represents a small operator cell or an identity used to participate in shared campaigns.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-25

ATT&CK

MITRE ATT&CK

T1498Network Denial of Service
T1583.004Server
T1589Gather Victim Identity Information
T1593Search Open Websites/Domains