threatintel
actor tracker
IOC pivot
ioc · name

InfraShutdown

Operator name for the Distributed Cloud Attack Tool (DCAT) used by Anonymous Sudan to launch 35,000+ DDoS attacks. Aliased as 'Skynet' and 'Godzilla Botnet' in the same Telegram channels. Tool seized and operators charged by DOJ in the unsealed October 2024 indictment of brothers Ahmed and Alaa Salah Yusuuf Omer.

family
DCAT
first seen
Jan 17, 2023
publisher
U.S. Department of Justice
source citation