Skip to content
Dark Storm Team Engages in DDoS Attacks and Extortion via Telegram

Dark Storm Team Engages in DDoS Attacks and Extortion via Telegram

First seen 10 Nov 2026, 18:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 18:21 UTC
  • •Dark Storm Team is linked to DDoS attacks and extortion activities.
  • •The group gained attention for a claimed attack on X in March 2025, which remains unverified.
  • •Telegram serves as a platform for their operations, allowing persistent activity despite account bans.

The Dark Storm Team, a hacktivist group first noted in late 2023, has been conducting DDoS attacks and selling access to compromised accounts through Telegram. The group gained notoriety in March 2025 after claiming responsibility for outages affecting X (formerly Twitter), although this attribution remains unconfirmed. Their operations include extortion attempts, such as a $5,000 cryptocurrency demand to cease DDoS activities against Amino. The group has shown resilience despite Telegram bans, continuously migrating to new accounts while maintaining identifiable user IDs. Research indicates affiliations with other hacktivist groups, including NoName057(16) and Team1914, suggesting a broader collaborative network. The investigation highlights the challenges in establishing clear identities and affiliations within the evolving landscape of hacktivism.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2023-12-01
Dark Storm Team first observed
The group was identified as a hacktivist entity operating on Telegram.
Gbhackers
2025-03-01
Claim of responsibility for X outage
Dark Storm Team claimed responsibility for significant outages affecting X, though unconfirmed by the platform.
Gbhackers
2025-10-19
Extortion attempt against Amino
GLITCH allegedly demanded $5,000 in cryptocurrency to halt DDoS activities against Amino.
Gbhackers
2026-09-01
Telegram channel ban
Dark Storm Team's Telegram channels faced bans, prompting the group to migrate to new accounts.
Gbhackers

More articles in this cluster (2)

Following this threat?

Track X in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

What types of attacks is Dark Storm Team involved in?
The group is involved in DDoS attacks, extortion, and selling access to compromised accounts.
How does Dark Storm Team operate on Telegram?
They use Telegram for communication, advertising their services, and maintaining multiple channels despite account bans.
Is there confirmed attribution for their attacks?
Attribution remains unclear, particularly regarding their claimed responsibility for the X outage in March 2025.