Jihadi Hacking Group Cyber TeamRox (CTR) Active On Telegram, Facebook

March 9, 2016

On March 3, 2016, the hacker group Cyber TeamRox launched its official channel on the encrypted messaging app Telegram. The group currently has 134 members. Posts by the group include: hacking technique; articles about cyberattacks and contributions from members; instructions on using VPN, how to circumvent online surveillance, and hacking drones; tracking the U.S. government’s cyber efforts, and claims of hacking the NSA; monitoring the Pentagon and other U.S. agencies; and recommendations to follow other Jihadi and pro-ISIS accounts, including the “Constants of Jihad.”

The group also claims to have hacked the NSA and Saudi government websites.

cjl3091

On March 3, 2016, CTR posted the following message setting out the goals for the group: publishing various hacking techniques and exploits, informative articles, and announcements of the latest cyber attacks, as well as contributions from others who want to share their knowledge.

cjl3092

cjl3093
On multiple occasions, CTR posted steps on how to use VPN

cjl3094
CTR claims responsibility for hacking a local Saudi government website

cjl3095
Post about the new U.S. Department of Defense program challeging Americans to hack their software

CTR also published a list of “do’s and don’ts” in hacking to ensure that actions do not draw attention or surveillance. Some of the tips focused on how to avoid getting on watchlists and how to circumvent surveillance, and warnings to not deal with the FBI.

cjl3096

cjl3097

cjl3098

cjl3099

cjl30910

CTR published what it claims to be the details of a hack of the NSA that it forwarded from the “Daily hadith” Telegram channel:

cjl30911

CTR also recommended that its followers join another channel, “The Constants of Jihad,” for “pro Islamic State updates, reminders, and important information”:

cjl30912

cjl30913

CTR provided a link to instructions on drone hacking:

cjl30914

cjl30915

cjl30916

cjl30917

Together with “Online Da’wah Operations,” CTR planned a Facebook attack for March 5, 2016 at 10 PM:

cjl30918

The group posted a list of websites to which it had gained access, including an Italian server with credit card information:

cjl30919

cjl20

MasterCard details from the server:

cjl30921

A repost from “Sons Caliphate Army”:

cjl30922

CTR shared a link to “Khilafah News”:

cjl30923

cjl30924

The group posted a back door to WordPress:

cjl30925

A hacker found a way to record and steal passwords in cleartext:

cjl30926

A post on unlocking fingerprint-protected phones using an inkjet printer:

cjl30927

A message forwarded from “Islamic State News” and “Islamic State Videos,” two other Telegram accounts:

cjl30928

CTR’s admins announced a new channel, “Kalachnikv Hackers” and asked followers to share the information and join it. Admin [email protected] said they would be posting on both channels:

cjl30929

cjl30930

cjl30931

Message announcing attack in coordination with Online Da’wah Operations:

cjl30932

The group also has a Facebook page; according to its “About,” this page was started in December 2014.[1]

cjl30933

Endnote:

[1] Facebook.com/TeamRoxofficial/info/?tab=page_info, accessed March 9, 2016