Key facts
- Phineas Fisher is a hacktivist known for targeting spyware makers FinFisher and Hacking Team.
- The hacker's 2015 breach of Hacking Team led to the leak of 400GB of data, including source code and internal emails.
- Phineas' actions contributed to the downfall of Hacking Team, with its CEO eventually selling the company for one euro.
- The hacker also targeted the Catalan police union and Turkey's ruling party.
- Phineas' last known activity was a hack of Cayman National Bank in 2016, followed by an announcement of a bug bounty program.
- Despite investigations, Phineas' real identity remains unknown, and their online presence has been erased.
Phineas Fisher, a hacker renowned for targeting controversial spyware companies, remains an enigma a decade after their most significant exploits. The hacktivist, whose true identity is unknown, gained notoriety for breaching firms like Gamma Group (makers of FinFisher spyware) and Hacking Team, an Italian startup that pioneered government spyware.
Phineas first surfaced in August 2014 by hacking Gamma Group and leaking data via a Twitter account named @GammaGroupPR. This initial hack, though limited in damage, was accompanied by a manifesto. A year later, Phineas executed a major breach of Hacking Team, exfiltrating over 400 gigabytes of data, including source code, emails, and customer lists. This leak enabled journalists to expose scandals in several countries and ultimately contributed to Hacking Team's demise, with its CEO later selling the company for a nominal sum.
Further actions by Phineas included hacking the union of Catalonia's police force, motivated by anti-police ideals, and targeting the ruling party of Turkey in solidarity with Rojava. In 2016, Phineas hacked Cayman National Bank, later announcing a 'Hacktivist Bug Bounty Program' to reward those exposing corporate wrongdoing. This was their last known public activity, with online accounts deleted and no further public appearances.
Despite investigations by Italian authorities and confirmation of the bank hack, Phineas' real identity has never been uncovered. The hacker has reportedly remained in contact with journalists, confirming they are alive. Speculation about their identity ranges from an anarchist hacktivist to a potential fabricated persona, though Phineas has denied being a Russian spy. Their origins and motivations remain subjects of mystery, with the hacker themselves admitting to using misinformation.