MODERN APPROACH TO ATTRIBUTING HACKTIVIST GROUPS

Summary from the TLDR InfoSec newsletter

Checkpoint Research has introduced a novel method for attributing hacktivist groups by employing language-based machine learning models and linguistic analysis to examine thousands of public messages. Its technique integrates topic modeling to reveal key subjects discussed by these groups and stylometric analysis to identify connections between groups based on their writing styles. This strategy shows that many state-sponsored entities disguise themselves as hacktivists, with the analysis effectively linking various hacktivist personas to individual operators and tracking how their focus shifts in response to geopolitical events.