memri
November 15, 2013 Inquiry & Analysis Series No. 1036

Afghan Cyber Army (ACA): Active On Facebook And YouTube – Recruiting and Training Volunteers, Claiming To Have Hacked U.S. Gov't Websites, U.S. And Israeli Bank Websites, Pakistan Gov't And Taliban Websites; Promising Major Attacks In Future

November 15, 2013 | By Steven Stalinsky and R. Sosnow*
Afghanistan | Inquiry & Analysis Series No. 1036

The Afghan Cyber Army is a hacktivist group that appears to be Afghan nationalist, pro-Afghan military, anti-U.S., Taliban, Pakistan, and Israel, targeting Pakistani, U.S., Taliban, Israeli, and other websites. It posts its claims of successful hacks on its Facebook page, sometimes accompanied by reports from various media confirming its claims, and, less often, on its YouTube channel.

Just today, it claimed to have hacked a number of of Pakistani websites, related to airlines, insurance companies, e-commerce, real estate, and health, and warned that it would be hacking many thousands more.[1]

According to its Facebook "About" section, it aims to "secure Afghan Cyber Space from cyber criminals and Afghanistan enemies,"[2] and says that it was formed in January 2005, and that it is located in Kabul City, Afghanistan.[3] The group, whose motto, or one of whose mottos, is "Live for Afghanistan or leave Afghanistan,"[4] actively maintains what it claims are official accounts on Facebook and YouTube.

In addition to its alleged hacking triumphs, the ACA also posts on its Facebook page numerous images of what it says are its activists on computers[5] and of computers and weapons together [6] (see Timeline Photos From ACA Facebook Page section, below) in addition to photos of Afghan troops and Afghan landscapes.

The ACA also conducts recruitment outreach. On its Facebook page, it calls for volunteers for its hacking efforts, offering a training course; on May 17, 2013, it posted: "Finally the moment has arrived for which every Afghan was waiting! We will start the online Ethical hacking in 20 days" along with registration details and terms and conditions (see ACA Calls For Volunteers, Offers "Ethical Hacking" Training – And Urges Registrants To "Share This With Your Friends section, below).

A member of the group said in an interview that the ACA is independent and that it relies on volunteers to carry out the hacking, and promised more and bigger cyberattacks in the future.[7]

In the past year, the ACA has claimed to have hacked the official U.S. government portal usa.gov[8] and with U.S. banks and credit card accounts,[9] over a million U.S. Facebook accounts,[10] and other U.S. websites,[11] and to have participated in the May 7, 2013 #OpUSA campaign (see "ACA Claims To Have Hacked USA.gov, Other U.S. Websites – And To Have Participated In #OpUSA" section below) in addition to the official Taliban website,[12] Israeli banks and other online Israeli targets,[13] Myanmar government websites,[14] and Philippine[15] and Chinese[16] websites.


ACA logo. Source: Facebook.com/AfgCyberArmy.

ACA Claims To Have Hacked USA.gov, Other U.S. Websites – And To Have Participated In #OpUSA

ACA Claims To Have Hacked Official U.S. Government Portal USA.gov

A November 7, 2012 post on the ACA Facebook page links to a YouTube video posted March 9, 2012 that claims to show a hack of the official U.S. government official web portal USA.gov.[17]


November 7, 2012 post linking to video claiming ACA had hacked USA.gov.

The video was posted by "TheHameed45," and the video's description on the page states, "American Gov Site Hacked By Afghan Pashtun Cyber Army instead of and in revenge of burning quran in Afghanistan." No further information on or corroboration of such a hacking attempt could be found on the ACA Facebook, or in the media.

May 2013: ACA Participates in "#OpUSA" – Hacks U.S. Facebook Accounts, Banks, Credit Cards

On April 18, 2013, the ACA posted on its Facebook page an image for the Anonymous-planned DDoS attack #OpUSA. The ACA announced in this post: "We are going to join #OpUSA, which will be occurring on 7 May, along with all our Muslim and Anti-American Hackers. This is to give a message to USA Citizens to wake up, and USA Government to stop Killing Muslims in name of Terrorism. We wish to have better achievements than we had in OP Israel. We need your prayers, Great Afghans!"


#OpUSA image posted April 18 on ACA Facebook page.

On its Facebook page on April 25, the ACA posted: "USA Forum Got Hacked by Afghan Cyber Army #OpUSA. It also posted on the same date: "#Op USA 305 USA website Has been Hacked By Afghan Cyber Army."

On May 7, the ACA claimed on its Facebook page that on that day it had hacked 1.1 million U.S. Facebook pages and 305 U.S. websites, as part of #OpUSA:


Posted May 7, 2013: "1,100,000 Facebook Accounts of USA citizens Hacked And Leaked By Afghan Cyber Army. We will post the Accounts info after 20 minutes, STAY TUNED! #OP USA USA, NO Justice=NO Peace"

Also on May 7, it posted: "US bank Hacked and Several CC accounts leaked by Afghan Cyber Army; Don't miss the cards," the "cards" being a reference to credit card information that would be posted soon.[18] It added to the post: "Below are the links of accounts complete information, that contains: Usernames, E-mail addresses, Passwords and Security Question."


May 7 2013: "US bank Hacked and Several CC accounts leaked by Afghan Cyber Army; Don't miss the cards"[19]

The following day, May 8, it posted: "Facebook started to Block 1100000 Facebook Accounts Leaked under .op USA By Afghan Cyber Army" and included a list of websites.

On May 19, the ACA posted on its Facebook page: "US Website Got Hacked By Afghan Cyber Army."

There were also reports that ACA had hacked and leaked over 1,400 credit cards from USBank.com; the reports included links to zip files.[20]

ACA Offers "Ethical Hacking" Training, Urging Registrants To "Share This With Your Friends" – And Issues Recruitment Call

On its Facebook page on May 17, 2013, the ACA posted a call for volunteers. Underneath an image, the appeal read: "Finally the moment has arrived for which every Afghan was waiting! We will start the online Ethical hacking in 20 days, Here is the registration form to join the Training Zone of ACA, download it," and included a link to a registration form.

It added, "After downloading, You must fill this form before 7/6/2013, after this date no form will be accepted. After filling the form send to: '[email protected]' Note: Fill in your real information please! Share this with your friends and don't miss the opportunity."


"Our Mission" statement from call for volunteers on ACA Facebook page: "Afghan Cyber Army (ACA)'s Mission is to Secure Afghan Cyber space from Cyber Criminals and Afghanistan enemies. And Bring Peace to our Country, we are just practitioner for other Countries You can call us Ethical Hackers But for those Countries who are Torturing muslims and Afghans we are Pure Black Hat Hackers. We don't have mercy for their cyber space." May 17, 2013.
[21]


Terms and Conditions and registration form (see text below)

"Terms & Conditions:

----------------------------------------------

"(It is requested not to apply without agreeing with these terms)

"1. The information that is provided in ACA (Training Zone) is to be used just for Educational Purposes. Afghan Cyber Army is not responsible for Any Misuse of the Information provided.

"2. All of the information in ACA (Training Zone) is meant to help the Afghan students defend their attitude in order to avoid the attack in needy times. You should not use your knowledge to cause any damage directly or indirectly.

"3. The word Hack or Hacking on ACA (Training Zone) should be regarded as Ethical Hack or Ethical hacking respectively. You are responsible for Any risk that can be caused by using this information and knowledge.

"4. Each Student should show respect to other Student of ACA(Training Zone) and must have a friendly relationship with each other, if any problem occurs between you and any other Student, you must discuss it with the Administrator of ACA.

"5. No Students are allowed to post items such as: Pornography, Violence, Scam, Negative and abusive comments on/from their accounts in any social network. Or do any other action that is considered as teasing, exclusion.......etc.

"6. The decision of the ACA administrator is valid in any situation at any time & without any prior notice.

"7. Hacking any Muslim country website is forbidden except Those Countries that are torturing Afghans.

"8. You must use your real information while filling this form.

"Kindly note that: ACA (Afghan Cyber Army) is an Afghan and Muslim hacker group

"No students are allowed to use their knowledge against Islam, And Afghanistan..

"IF ANY STUDENT VIOLATES THE RULES MENTIONED ABOVE, WILL BE BANNED FROM THE TRAINING ZONE.

"If you agree with these terms.

"Then fill up the registration form

"Please be patient ACA admin panel will review your application form and you will be notified via FB Message or by Email.

"** Please read & fill this form carefully **

"**Original Name:

"**Country:

"**Current Place:

"**Occupation(full info):

"**Date of Birth: / / /

"**Facebook id :

"1. (If many) …..

"2. (If many) …..

"3. (If many) …..

"**Phone number (always on):

"**Skype id:

"**E-mail address (always available):

"**ID Card or Passport Number:

"**If you have any other computer or Web related skill please specify it here :"

"Ethical Hacking" Training, Though Delayed, Proves So Popular That Applicants Plead For Deadline Extension

On September 27, the ACA announced "Good News" on its Facebook page: that the "Ethical Hacking Training Zone" lessons would "start very soon." It also gave further instructions for registered applicants:

There were numerous responses from would-be applicants who had not been successful in registering. , and the ACA stepped in to offer assistance: "I couldnt send my applictiom... I was very busy upto deadline...can I send it now?"; "How to send application?"; "I had already send the form before some months when the training will start im really waiting for..."; "waiting from long time for this opportunity"; "How to send I want to get this training J"; "I did not know that when did hyou announce this chance plz give this chance to be a member of your team thanks."

On September 28, the ACA announced on its Facebook page that "the Deadline for joining the training zone has finished" and that "No more registration forms will be accepted."

The "Comments" section of the post soon filled up with complaints and pleas for an extension from would-be applicants: "Ohhh dude it is very bad, dont tell me this...today I prepared evrrything but I couldn't send it because I don't have a connection here...give us one more day plz"; "Yeah he is right we should have an extra day friends!"; "when I send u msg u didn't answer now ur saying forms not acceptable its very bad"; "can't you please wait only one more days_answer please_ if you accept so we send our forms"; "I have just found the form today, I will send it, plz accept me," and the like.

ACA Issues Recruitment Call On Facebook

On September 26, the ACA announced "A great Surprise for everyone!!" on its Facebook page – i.e. that the "Afghan Cyber Army is accepting Crew Members in Team, who want to join us? P.M. me!!!!"

The announcement was enthusiastically received: "I wanna"; "I wanna join but I living in Norway? I am very good to IT (ADB)"; "I wana join"; "Im not in Afghanistan im in India"; "me"; "me"; "me" "I want to join" and so on.

ACA On Facebook

The ACA's official Facebook page (facebook.com/AfgCyberArmy) notes that the group joined Facebook on December 9, 2011. Its posts on this page are mostly about hacks it claims to have carried out (see list below) and photos and news of the Afghan army. As of August 20, 2013, the page had 9,578 "likes" – a number that is nearly double the number of "likes" just two weeks previously; the increase could be due to the group's intensive recent activity.


Image captured July 15, 2013

The "About" and "Description" sections of the Facebook page contain the same information as the "About" section of its YouTube page. Under "About," it states: "Afghanistan Cyber Army (ACA)'s Mission is to secure Afghan Cyber Space from cyber criminals and Afghanistan enemies. support your Cyber Army (ACA) !" Under "Description, it states: "Strongest and Powerful Ethical Hackers Army In Afghanistan ! The first cyber army in Afghanistan! A.C.A Founder of Hacking in Afghanistan! We Never forgive never forget never spare. we are Afghan Cyber Army (ACA) standing united against enemies... "


ACA Facebook post: "Silent as Snakes! Brave as Lions! Tough as Concrete! Dangerous as Daggers! Sharp as Knives! They are the world's Toughest soldiers, as in the world they live in. Pride of Afghanistan! If you love them, Live in Afghanistan! If you have them, Leave Afghanistan!" August 1, 2013.


ACA Facebook post: "Official website of (National Database and Registration Authority) of Pakistan Is Downed And Database IS Crashed BY Afghan Cyber Army!" August 2, 2013.

Hacks ACA Claims To Have Carried Out – As Posted On Its Facebook Page

On October 3, the ACA announced on its Facebook page that it had hacked the Syrian Investment Agency (SIA), a government body:


Accessed October 16, 2013

On October 6, 2013, it posted notices of news of the hack; according to these posts, the image that the ACA planted on the SIA website praised the Al-Qaeda affiliate in Syria Jabhat Al-Nusrah. It read in part: "O people of Syria, if you want we sacrifice our souls for you, and I say to all Mujahedeen brothers generally and to the Mujahedeen of Jabhat-Ul-Nasrah specifically: may Allah bless you in your Jihad and sacrifices and may Allah benefit through you... Victory has become successive and the structure of Islam is now high and mighty. Hold your sword and fight those who have transgressed. With your machine gun enter the battlefield."


Accessed October 16, 2013

It is interesting to note that the ACA apparently opposes anti-government jihadis in Afghanistan, it supports them in Syria.

On September 15, 2013, the Afghan Cyber Army (ACA) wrote on its Facebook page that it had hacked the website of Australia's 7dNews and, in another post, several other Australia-based websites. Three days previously, on September 12, to mark the anniversary of 9/11, it announced it had hacked several U.S. websites that it alleged were related to the U.S. military, in addition to another U.S. website. In another post the same day, it announced that it had hacked the Fort Bragg Life forum and, the day before that, on the 9/11 anniversary itself, it announced that it had hacked a U.S. "military life" forum. In yet another September 11 post, the group announced that it had hacked and leaked details from the Israeli Technion's Laboratory of Computational Biology. (It is interesting to note that as of this writing, all September 12 and September 11 posts have been removed from the group's Facebook page.) Also, on September 9, it announced that it had hacked a number of U.S.-based online forums.

Hacks Of Australian Websites


Accessed October 3, 2013.


Accessed October 3, 2013.

ACA Facebook Announcements Of Hacks Of Alleged U.S. Military-Related Websites, Israeli Technion, And Other U.S. Websites, For 9/11 Anniversary – All Now Removed From Facebook Page

On September 12, the ACA announced on its Facebook page, "U.S. Military Issued Girl Friends – lolXD – Forum Got Hacked By Afghan Cyber Army," "U.S. Bayou Shooter Military Forum Got Hacked By Afghan Cyber Army," and "USA DriftTrikes Got Hacked By Afghan Cyber Army," and added the following image:


Accessed September 23, 2013. These posts have since been removed from the ACA Facebook page.

Also on September 12, the ACA announced in a separate post, "U.S. Fort Bragg life Military Forum Got Hacked By Afghan Cyber Army," and added the same image. In yet another post, it announced, "U.S. This Military Life Forum Got Hacked By Afghan Cyber Army," also with the same image.

On September 11, the group announced on its Facebook page, Computational Biology Laboratory, Technion, of Israel Hacked By Afghan Cyber Army, and added that it had leaked data from the hacked website.


Accessed September 23, 2013. This post has since been removed from the ACA Facebook page.

The text of the post on the ACA Facebook page read:

"Computational Biology Laboratory, Technion, of Israel Hacked By Afghan Cyber Army.

"#Op Israel Reborn

"#Freedom For Palestine

"Message: Why we have wasted our time to Roast your fucking Ass ?Just because let us convey our message,I am writing on the behalf of all Muslims of the World . DAMN you ISREAL ,So, what you reap from that war except the destruction and devastation of your life !!You only made a palestinian generation more stronger, more ruthless and more valor!Because you are mentally retarded people because you do not learn from your mistakes,and from mistakes of those who preceded you of your pigs! ~ Our last words to all fucking Israelis and fucking Jews !! ~ We Muslims are people who love to drink bloods. And we learn that the taste of your blood is delicious !! We swear by ALLAH,we will come to you like hungry lions, cut your bodies, roast your Asses, and rip what remaining of you. But who fall in our hands of your soldiers, we will throw him to our children to play him as a hungry cat.BIG FUCK Goes to your Fucking Spokesman !! :D “The ministry’s computer division will continue to block the millions of cyber attacks,” Steinitz said. We are enjoying the fruits of our investment in recent years in developing computerized defence systemsLMAO ? You Enjoyed huh ? FUCK U ISRAEL and FUCK your those lamers Security Administrators ! #Near time you will be not able to find israel in google Maps Inshallah.

"1,684,500 (1,6 Million) Data Leaked From Computational Biology Laboratory, Technion, of Israel

"#1,500,000 (1,5 Million) Host Deatels Leaked From Computational Biology Laboratory, Technion, of Israel By Afghan Cyber Army.

"#172000 Users Leaked From Computational Biology Laboratory, Technion, of Israel By Afghan Cyber Army.

"#12500 Team Data Leaked From Computational Biology Laboratory, Technion, of Israel By Afghan Cyber Army."

All the above posts have been removed from the ACA Facebook page.

On September 9, the group announced on its Facebook page, "USA Forums Got Hacked By Afghan Cyber Army":


Accessed October 3, 2013.

Earlier, on September 3, 2013, the Afghan Cyber Army (ACA) wrote on its Facebook page that it had hacked Pakistani Ministry of Defense and government websites. According to the Itpark.pk website, the ACA hacked the website of the Directorate General Defence Purchase of Pakistan, and leaked 62 files to the public. It noted that the message left by the ACA on the hacked website read: "This hack is a response to the rocket attacks of Pakistan military on Kunar and Jalalabad Provinces of Afghanistan! Next time wait for…bigger damage, We will not let any torture and overtaking on our land unanswered. Remember WE ARE AFGHANS, WE DO NOT FORGET, WE DO NOT FORGIVE! Rest in peace the Heroes of Afghanistan we will never forgot your Sacrifice and we never will let porkies and this world forget it too. Live For Afghanistan Or Leave Afghanistan Greetings: To All Afghans & All Afghan Security Forces."[22]


ACA Facebook announcements of hacks, September 3, 2013.[23]

Just a month previously, in August, the ACA hacked some 300 Pakistani government, business, and educational institution websites, leaving on them a message stating: "This hack is a response to the rocket attacks of Pakistan military on Kunar and Jalalabad Provinces of Afghanistan! Next time wait for...bigger damage. We will not let any torture and overtaking on our land unanswered."[24]

The following are other recent hacks claimed by the ACA and announced on its Facebook page; for some of the announcements, the group provides evidence in the form of screenshots of websites it says it hacked and/or links to articles about the hacks from various sources.[25]

  • August 14, 2013: "57 High profile Paksitani [sic] websites Got Hacked by Afghan Cyber Army"
  • August 10, 2013: "365 Pakistani websites Got Hacked by Afghan Cyber Army," "Website of leading Pakistani Newspaper (Daily Post International Hacked by Afghan Cyber Army," "Pakistan Baadban news and Tv Channel Owned by Afghan Cyber Army"
  • August 8, 2013: "Pakistan Attock police official website GOt Hacked by Afghan Cyber Army"
  • August 2, 2013: "The official website of the National Database and Registration Authority of Pakistan was crashed by the ACA."
  • July 22, 2013: "National Tuberculosis Control program of Pakistan Hacked By Afghan Cyber Army."
  • July 17, 2013: "National Disaster Management Authority of Pakistan Deleted By Afghan Cyber Army"
  • July 16, 2013: "National Savings Ministry of Finance Government of Pakistan Leaked By Afghan Cyber Army"
  • July 16, 2013: "Pakistan Military Men Personal Data Leaked By Afghan Cyber Army "
  • July 14, 2013: "District Government of Shaheed Benazirabad Got Hacked By Afghan Cyber Army"
  • July 13, 2013: "Govt. of Pakistan Deleted By Afghan Cyber Army ", "National Disaster Management Authority of Pakistan Deleted By Afghan Cyber Army"
  • July 11, 2013: "Ministry of Defence of Pakistan Got hacked By Afghan Cyber Army"
  • July 7, 2013: "Talibans official Websites and whole server Pawned again by Afghan Cyber Army!"
  • July 5, 2013: "Mac Shop of Israel Got Owned By Afghan Cyber Army," "Afghan Cyber Army Declare War on Israel" "# op Israel Reloaded"
  • July 4, 2013: "Future Energy Resource Team Got Hacked By Afghan Cyber Army "
  • July 3, 2013: "Official website of President of Pakistan Got Hacked And Database Leaked By Afghan Cyber Army "
  • July 2, 2013: "Pakistan Christian Ministry Got Owned By Afghan Cyber Army"
  • July 1, 2013: "Taliban Official website Shahamat is Suspended By Afghan Cyber Army," "Taliban Official w#2149 Israeli E-Mail accounts Dumped By Afghan Cyber Army," "Website Shahamat is Suspended By Afghan Cyber Army "
  • July 1, 2013: "Official website of Government of Pakistan is Deleted By Afghan Cyber Army," "Pakistan ID Cards Website Deleted by Afghan Cyber Army" "MBK Exports of Pakistan Got Owned By Afghan Cyber Army" "Ministry of Commerce Pakistan Hacked And Database Leaked By Afghan Cyber Army" "Official website of President of Pakistan Got Hacked And Database Leaked By Afghan Cyber Army" " #2149 Israeli E-Mail accounts Dumped By Afghan Cyber Army, Includes:Login , password ,Email ,Name,Created Date, # op Israel Reloaded, Target:Israeli E-Mail Accounts" " #165,000 Israeli webmaster accounts Dumped By Afghan Cyber Army"
  • June 27, 2013: "Ali Ali Telecom of Pakistan Got Hacked By Afghan Cyber Army "
  • June 26, 2013: "Ministry Of Transport Myanmar Got Hacked By Afghan Cyber Army " "Some High Profile Pakistani Websites Has Been Hacked By Afghan Cyber Army"
  • June 24, 2013: "Ministry of Communications Information Technology Of Myanmar Hacked and Database Leaked By Afghan Cyber Army "
  • June 23, 2013: "Several CC Accounts Leaked from an Israeli Bank By Afghan Cyber Army "
  • June 21, 2013: "Dumped 165,000 Israeli webmasters' accounts "
  • June 6 2013: "Secret Terrorist operations of Pakistan Army on Afghanistan Leaked By Afghan Cyber Army; "Pakistan Mahfile Taib Full Talibani Supporter website got Hacked By Afghan Cyber Army"; "American Acia College Got Hacked By Afghan Cyber Army"

Timeline Photos From ACA Facebook Page


"Afghan cyber army (ACA) office! Guys on work!" ACA Facebook page, December 9, 2012,
[26]


Two photos posted June 7, 2013 from ACA Facebook photo album titled "Feel the power of Afghan Cyber Army." Text on album main page reads (in a twist on John F. Kennedy's January 1961 inaugural address):
"Feel the power of Afghan Cyber Army
"Let every nation know, whether it wishes us well or ill, that we shall pay any price, bear any burden, meet any hardship, support any friend, oppose any foe to assure the survival and the success of Afghanistan. Live for Afghanistan Or Leave Afghanistan!"[27]


"Hack-Mirror Unrestricted information Got pawned By Afghan Cyber Army." July 6, 2013. ACA commented on this image:
"You give Us warning?!
"You delete our Some mirrors?!
"And Called us Ddoser ?!
"You made us angry And when Afghan gets Angry, everything goes to hell.
"You got Pawned by Afghan Cyber Army!
"Never and Never try again to compete with us, otherwise you will pay very hard for it."[28]


"Mac Shop of Israel Got Owned By Afghan Cyber Army" July 5 2013. [29]


Photo and comments posted November 15, 2012, about Bangladeshi hackers protesting film "Innocence of Muslims":
"Thousands of sites defaced by Bangladeshi hackers to protest against movie 'Innocence of Muslims'
"Hackers write message on deface page,'Islam means Peace. We, the Muslims want peace all over the world. But you don't want to be stay in peace. Don't think us weak. We are more more and more stronger than you that you cannot imagine. By creating this video you have just insulted our "Islam" and our beloved Prophet Muhammad(s.a.w.) and break the peace between you and us. Now we are in your cyber space to destroy it. We will hit you until you stop hitting us and want marcy for your did.' Recently the six major American banks suffered denial-of-service attacks, in which "Mrt. Izz ad-Din alQasssam Cyber Fighters ," hackers barrage a website with traffic until it is overwhelmed and shuts down. The complete list of Hacked site posted on Pastebin. Mirrors of Defacements:"
[30]

Another ACA-Affiliated Facebook Page

A second FB page apparently affiliated with the ACA, facebook.com/AfghanCyber, was launched on October 17, 2012; its "About" section states, "Our orginal page was Hacked by Indian Noobs This page is the offical page of Afghan Cyber Army (ACA)." This page has only a few posts, with the latest one dated July 7, 2013. As of this writing it has 43 likes.

ACA On YouTube


The ACA YouTube channel page.

The ACA's YouTube page (youtube.com/user/AfgCyberArmy/videos) was created May 16, 2013, and as of August 20, 2013 had posted four videos. As of this writing, it has 36 subscribers and 557 views.

Two of the videos posted show viewers how to download certain hacking software; one provides links to the ACA Facebook page; and the fourth claims responsibility for hacking 305 U.S. websites.

This last video, which was also posted on the ACA Facebook page on May 9, 2013, has a voice-over in American-accented English stating: "We are Afghan Cyber Army, ACA," and reading out a text that appears also in its About section (see below): "Afghanistan Cyber Army (ACA)'s Mission is to secure Afghan Cyber Space from cyber criminals and Afghanistan enemies. Support your Cyber Army (ACA)." The voice then refers viewers to the organization's Facebook page and urges them to "drop us a line" and to support the ACA, against a backdrop of a scrolling list of unimportant commercial websites it claims to have hacked.

In the "About" section of its YouTube page, the group states:

"Afghanistan Cyber Army (ACA)'s Mission is to secure Afghan Cyber Space from cyber criminals and "Afghanistan enemies. support your Cyber Army (ACA) !

"Strongest and Powerful Ethical Hackers Army In Afghanistan !

"The first cyber army in Afghanistan!

"A.C.A Founder of Hacking in Afghanistan!

"We Never forgive never forget. we are Afghan Cyber Army (ACA) standing united against enemies...."

 

*Steven Stalinsky is Executive Director of MEMRI; R. Sosnow is Head Editor at MEMRI.

 
Endnotes:

[1] Facebook.com/AfgCyberArmy; Incpak.com, November 15, 2013.

[2] Facebook.com/AfgCyberArmy/info.

[3] Facebook.com/AfgCyberArmy/info.

[4] Facebook.com/photo.php?fbid=386527711457098&set=a.231614710281733.46004.136096673166871&type=1&theater, accessed September 11, 2013.

[5] Facebook.com/photo.php?fbid=306923092750894&set=a.136134206496451.24874.136096673166871&type=3&theater.

[6] Facebook.com/media/set/?set=a.380676592042210.1073741824.136096673166871&type=3.

[7] Stars and Stripes, August 12, 2013. The next day on its Facebook page, the ACA denied that any of its members had made the statements.

[8] Youtube.com/watch?v=d4Egg_Yr8l8, accessed August 26, 2013.

[9] Facebook.com/photo.php?fbid=368879966555206&set=pb.136096673166871.-2207520000.1377196710.&type=3&theater.

[10] Facebook.com/AfgCyberArmy, May 7, 2013. As with many other hacktivist groups, Afghan cyber army attacks cannot always be verified.

[11] Facebook.com/AfgCyberArmy: "Some US Website Has Been Hacked by Afghan cyber Army," February 2, 2013.

[12] Facebook.com/AfgCyberArmy July 7, July 1, 2013.

[13] Facebook.com/AfgCyberArmy July 5, 2013: ""Mac Shop of Israel Got Owned By Afghan Cyber Army," "Afghan Cyber Army Declare War on Israel."

[14] Facebook.com/AfgCyberArmy. June 26, 2013: "Ministry Of Transport Myanmar Got Hacked By Afghan Cyber Army."

June 24, 2013: "Ministry of Communications Information Technology Of Myanmar Hacked and Database Leaked By Afghan Cyber Army."

[15] Facebook.com/AfgCyberArmy, "Philippine Computer science Unversity with some other Us websites has been Hacked By Afghan Cyber Army" March 3, 2013.

[16] Facebook.com/AfgCyberArmy, "Small Attack on China Cyber space 11 government websites of China got hacked by Afghan Cyber Army," March 14, 2013.

[17] Youtube.com/watch?v=d4Egg_Yr8l8 accessed August 26, 2013.

[18] Facebook.com/photo.php?fbid=368879966555206&set=pb.136096673166871.-2207520000.1377196710.&type=3&theater.

[19] Facebook.com/photo.php?fbid=368879966555206&set=pb.136096673166871.-2207520000.1377196710.&type=3&theater.

[20] maurihackers.info/2013/05/opusa-305-websites-hacked-by-afghan.html, maurihackers.info/2013/04/opusa-20-websites-defaced-by-afghan.html,hackersnewsbulletin.com/2013/05/list-of-websites-affected-under-opusa.html.

[21] Facebook.com/photo.php?fbid=372757756167427&set=pb.136096673166871.-2207520000.1377181670.&type=3&src=https%3A%2F%2Ffbcdn-sphotos-f-a.akamaihd.net%2Fhphotos-ak-prn2%2F964582_372757756167427_915741840_o.jpg&smallsrc=https%3A%2F%2Fsphotos-b.xx.fbcdn.net%2Fhphotos-prn1%2F922767_372757756167427_915741840_n.jpg&size=1582%2C2048.

[22] Itpark.pk, September 3, 2013.

[23] Facebook.com/AfgCyberArmy, September 3, 2013.

[24] Stars and Stripes, August 12, 2013; Softpedia, August 12, 2013.

[25] The sources include: softpedia.com, Iran's Fars News, cyberwarzone.com, dailytimes.com.pk, hackersnewsbulletin.com, W3bSecurity.com thehacknews.org, cyberaon.com, maurihackers.info, ehackingnews.com, techworm.in, and others.

[26] Facebook.com/photo.php?fbid=306923092750894&set=a.136134206496451.24874.136096673166871&type=3&theater.

[27] Facebook.com/media/set/?set=a.380676592042210.1073741824.136096673166871&type=3.

[28] Facebook.com/photo.php?fbid=392943954148807&set=pb.136096673166871.-2207520000.1377196115.&type=3&theater.

[29] Facebook.com/photo.php?fbid=392572297519306&set=pb.136096673166871.-2207520000.1377196115.&type=3&theater.

[30] Facebook.com/photo.php?fbid=298696720240198&set=pb.136096673166871.-2207520000.1377198688.&type=3&theater.

Share this Report: