anon404

anon404 is a cyber persona publicly associated with the TRASER SEC TEAM defacement ecosystem. A third-party defacement archive records thousands of notifier entries under the anon404 label and repeatedly associates the notifier with TRASER SEC TEAM during March 2026. The currently observable Telegram contact is @[redacted].

Actor-modified pages and defacement mirrors repeatedly connect anon404 with TRASER SEC TEAM and, in several instances, co-brand activity with APT GhostID. These artifacts support a meaningful ecosystem relationship. They do not establish that APT GhostID and TRASER SEC TEAM are the same organization, nor that all activity under either label is attributable to anon404.

Leadership attribution remains contested. Multiple actor-modified pages name anon404 as CEO or Founder & CEO of TRASER SEC TEAM, while other pages in the same branding ecosystem identify ApipXploit as founder. The dossier therefore treats anon404 leadership as an actor-controlled claim rather than a confirmed organizational fact.

The best-supported behavior is public website defacement. The access method is not consistently documented across the archive, so exploitation, credential abuse, web-shell deployment and other post-compromise techniques are defensive hypotheses rather than actor-confirmed TTPs.

Overall confidence is high for the anon404–TRASER SEC TEAM association and recurring defacement activity; medium for a recurring relationship with APT GhostID; and low-to-medium for founder/CEO status and any inferred Indonesian origin.