Loading threat actor…
Legion of Doom (LOD) was a prominent U.S. hacker and phone-phreak collective formed in 1984 by an individual using the handle Lex Luthor. Active primarily during the 1980s and early 1990s, LOD was associated with the dial-up bulletin-board underground and with Phrack. Its membership included figures known by handles such as The Mentor, Erik Bloodaxe, Prophet, Urvile, and Leftist; accounts also distinguish an Atlanta-associated contingent and a later “second generation” of the group. LOD members were linked to unauthorized access to telecommunications networks and digital telephone-switching environments, including the acquisition and dissemination of proprietary telephone-company material. Activities attributed to members included obtaining credentials and technical information through social engineering and discarded documentation, accessing telecommunications systems, manipulating telephone records and diagnostic capabilities, monitoring calls, and distributing technical information through bulletin boards and electronic publications. LOD became a major subject of U.S. Secret Service and federal investigations during the 1990 Hacker Crackdown, particularly investigations arising from unauthorized access to BellSouth systems and publication of an internal emergency-services document. The collective was also a rival of the New York-based Masters of Deception during the early-1990s “Great Hacker War.”
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
18 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
15 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Historic hacker collective mentioned as one of several organized hacker communities active in the 1980s; the reference provides no specific operations or malware attribution.
Described as one of the largest hacker and phreaker rings in the country targeted by U.S. law enforcement.
Historic hacker group formed by Lex Luthor and described as attracting top hackers.
A named hacker collective discussed in connection with bulletin board activity, publication and distribution of Phrack issue #24, and alleged possession of a Bell South 911 document during the 1990 Steve Jackson Games investigation.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.