Threat Groups and Motivations
RipperSec is a pro-Palestinian hacktivist group based in Malaysia. They have been active on Telegram since June 2023, amassing over 5,000 followers on their channel before it was banned by Telegram on March 22, 2025. RipperSec’s DDoS attack claim posts consistently follow a recognizable pattern that reveals both their intentions and style. Each post boldly announces the disruption of U.S.-based organizations’ websites, often accompanied by hashtags like #OpClean, #FreePalestine, and #StopGenocide. These messages reflect a hacktivist agenda rooted in political protest and social defiance. The content regularly features aggressive slogans and direct calls to action, targeting institutions in industries ranging from finance and government to religion and hospitality.
RipRipperSec members rely primarily on a Web DDoS attack tool named MegaMedusa for their DDoS attacks. The tool’s source code is maintained and published on GitHub by a member of the RipperSec group. While its JavaScript code is obfuscated, it is easy enough to deobfuscate and recover readable code. MegaMedusa is a command-line tool that can be executed using the Node.js cross-platform JavaScript runtime environment. Node.js provides asynchronous and non-blocking I/O, allowing it to handle multiple requests concurrently. This makes it highly efficient for I/O-bound tasks such as managing large amounts of encrypted web connections. Node.js applications can also run on multiple platforms (Windows, macOS, Linux) without needing platform-specific code. The author of MegaMedusa provides an installation script and steps to install and run the tool on the code repository’s GitHub landing page. Only five simple commands are needed to download and install the Node.js runtime environment and all required dependencies. Anyone who runs a Linux-based system at home or rents a Linux-based virtual private system in a public or bulletproof cloud can gear up to launch highly scalable Web DDoS attacks against targets of their choice in only a few minutes.