Soyjak Party
Soyjak Party, also referred to as The Party, is a hacker collective publicly linked in the provided reporting to the April 2025 compromise of 4chan. The group claimed responsibility for infiltrating 4chan’s systems and stated it could leak site code and personal information relating to staff. Reporting cited claims that the group published screenshots allegedly showing access to 4chan administrative panels, moderation tools, ban templates, internal staff tools, and email addresses said to belong to administrators, moderators, and janitors. The group also allegedly restored and defaced the /qa/ board. A member identified as “Chud” claimed the operation was called “soyclipse” and asserted that access to 4chan had been maintained for more than a year, though the reporting notes these claims were not fully independently verified. Some exposed moderators reportedly confirmed to TechCrunch that leaked data was authentic, and reporting stated attackers also accessed personal data of paid 4chan Pass subscribers. The content does not attribute Soyjak Party to any nation state. Known aliases directly mentioned in the content are Soyjak Party and The Party.
Know when an actor pivots toward your sector
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Targeting
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Who they target
Sectors the actor has been observed targeting.
- Media & Entertainment
Tradecraft
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
Recent activity
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Claimed responsibility for the compromise of 4chan, including access to administrative panels, reopening and defacing /qa/, leaking staff personal data, and publishing site source code.
Claimed intrusion into 4chan’s systems, alleging compromise of site code and staff personal information and asserting the administrators took the site offline to mitigate damage.
The version that knows your environment.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.