HOMETHREATS313 Team
APT / THREAT GROUP HACKTIVISM

313 Team

🇮🇶IQ-attributed
1
campaigns
1
aliases
Last seen:Mar 25, 2026

Intelligence Profile

313 Team is an Iraq-based threat actor that has conducted coordinated DDoS campaigns targeting multiple government servers in the UAE, Kuwait, and Romania, often in response to political statements. They have claimed responsibility for significant disruptions, including a one-hour shutdown of Romania’s National Tax Agency and an 18-hour outage of Kuwait's national e-government portal. The group has also engaged in website defacements, showcasing coordinated branding with other aligned groups. Their operations reflect a focus on government infrastructure, employing DDoS techniques and leveraging public political discourse as justification for their attacks.

Threat Analysis

313 Team is a known-sophistication threat actor attributed to IQ, engaged in cyber operations with a primary motivation of hacktivism.

As a hacktivist-aligned entity, 313 Team conducts operations driven by ideological, political, or social grievances, typically through website defacements, DDoS attacks, and the leaking of sensitive data to advance a public narrative.

Known Campaigns

313 Team — Active Operations March 2026

313 Team is a hacktivism threat actor attributed to IQ. 313 Team is an Iraq-based threat actor that has conducted coordinated DDoS campaigns targeting multiple government servers in the UAE, Kuwait, and Romania, often in response to political statements. They have claimed responsibility for significant disruptions, including a one-hou...

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Motivation hacktivism
Origin🇮🇶 IQ
Aliases1
SourceMalpedia

Also Known As

313 Team

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.