Hacktivist

A hacktivist is an individual or a group who uses their skills in information and communications technology to promote a political, social or ideological cause.

Through hacking and online activism, hacktivists set out to raise awareness, push for change and make their position public using technical means.

What they do ranges from peaceful digital protest to outright attacks, and the objective is consistent: influence public opinion and make an impact that gets noticed.

What characterises them

Activism carried out online. They use online platforms and hacking tools for the activism itself: publishing information, organising virtual protests, leaking confidential documents, or running attacks against specific targets.

Ideological motives. The driver is a cause rather than money. Freedom of expression, online privacy, human rights, government transparency, or whatever the group considers important. Technology is the instrument, not the point.

A wide range of actions. Some stay inside what is lawful, running awareness campaigns and publishing analysis. Others use illegal tactics: defacing sites, disrupting services, dumping stolen data. The label covers both, which is why it is worth being precise about which one you are talking about.

Why it matters to a defender

Motive changes the threat model, and that is the practical reason this term is in a security glossary rather than a political one.

A financially motivated attacker wants to stay quiet, monetise access and leave. A hacktivist wants the opposite: the whole point is that the action is seen. That changes what you should expect, which is noise, publicity, and timing tied to an event or an announcement rather than to your patching cycle.

It also changes who is a target. Organisations that would not otherwise be interesting become targets because of a contract they hold, a sector they operate in, or a public position somebody took.

A worked example

A group of hacktivists launches a distributed denial of service attack against the website of a company involved in a disputed environmental practice.

The aim is to interrupt the site and draw attention to the issue.

Through the action they hope to raise public awareness and put pressure on the company to change what it does.

Where to read more

“Legality of DDoS: Criminal Deed vs. Act of Civil Disobedience”, Infosec: an overview of hacktivism, its legal and ethical implications, and how organisations can prepare for it.

“Hacktivism: definition, types and newsworthy attacks”, Norton: a description of hacktivism including its history, its objectives and the methods used.

“Cybercrime vs hacktivism: do we need a differentiated regulatory approach?”, University of Exeter: explores the concept, the motivations and notable past actions, and analyses the legal and security implications.