313 Team

313 Team is an Iraq-based threat actor that has conducted coordinated DDoS campaigns targeting multiple government servers in the UAE, Kuwait, and Romania, often in response to political statements. They have claimed responsibility for significant disruptions, including a one-hour shutdown of Romania’s National Tax Agency and an 18-hour outage of Kuwait's national e-government portal. The group has also engaged in website defacements, showcasing coordinated branding with other aligned groups. Their operations reflect a focus on government infrastructure, employing DDoS techniques and leveraging public political discourse as justification for their attacks.

The group's reported origin is Iraq.

Its latest activity was recorded on Nov 3, 2026.

20 posts were recorded in its monitored channels over the last 12 months; the first was seen on Oct 12, 2026.

The country mentioned most in its posts is Azerbaijan (4 posts).

Published reports on this actor:

• https://socradar.io/blog/telegram-activity-timeline-iran-israel-us-war/

Source: MISP Galaxy, Malpedia.