Identify and summarize hacktivist actors, TTPs, and geopolitical alignments.
npx skills add https://github.com/Liberty91LTD/cti-skills --skill hacktivism
Please help me install this Agent Skill. Skill: hacktivism Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/hacktivism Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill hacktivism
Provides a self-updating intelligence knowledge base on hacktivism to accelerate threat research and contextual understanding for security teams and researchers.
Ask it for a current hacktivist profile or a summary of ongoing campaigns.
High-intent search queries and answers about installing and using this skill.
State-aligned hacktivist groups like KillNet and NoName057(16) currently utilize DDoS attacks, data leaks, and ICS targeting. This Skill provides up-to-date profiles of these actors, summarizing their tactics, techniques, and procedures alongside geopolitical alignments.
You can get an intelligence briefing on ongoing hacktivist campaigns by requesting a current campaign summary. The Skill generates concise, source-backed reports featuring attribution details, timelines, and risk assessments suitable for security briefing production.
Yes, this hacktivism intel covers threat groups targeting ICS infrastructure. It specifically tracks actors like Cyber Av3ngers and tracks evolving patterns in ICS targeting, providing historical context from 2022 through 2025 for security teams.
Yes, you can use this knowledge base for threat attribution considerations regarding Anonymous Sudan and IT Army of Ukraine. It cross-references sources and risk-context to support attribution analysis and strategic decision making for researchers.
The best way to research the geopolitical alignments of hacktivist actors from 2022 to 2025 is using a self-updating knowledge base. This Skill identifies and summarizes actor alignments, providing historical context and ongoing campaign tracking for threat intelligence.
A limitation of using this hacktivism knowledge base is that it provides concise summaries rather than raw data feeds. It is designed for accelerating threat research and contextual understanding, meaning security teams must still correlate reports with internal telemetry for operational defense.
dapperdiversAggregate threat intelligence feeds and vulnerability data into daily security briefings.
CarbeneAIGather public-source intelligence for due diligence and threat research.
doanchienthangdevDesign layered security architectures across perimeter, network, application, data, and identity layers.
Liberty91LTDOrganize threat actor intelligence into update-ready profiles with MITRE ATT&CK mappings.
