Anokin

Record ID: ACT-0021
Handle(s): @Anokin
Status: Active
First Observed: 2024-10-24

Summary

Anokin is an active and technically proficient participant in various underground, cybercrime-adjacent, and hacktivism-focused Telegram communities. Known for his strong grasp of operational security (OpSec) and computer science fundamentals, Anokin frequently acts as an informal advisor to other users, criticizing poor security practices and low-effort fraud schemes.

He demonstrates a solid understanding of low-level programming (advocating for C and C++ over higher-level languages like Python to understand memory allocation), networking, and malware deployment. Anokin is highly analytical regarding the downfalls of other threat actors, frequently breaking down how individuals like “Kiber Phantom” and “Jayze” were arrested or doxxed due to OpSec failures. Aside from his technical acumen, he claims to be neurodivergent, to have studied linguistics, and to speak five languages, including Russian and English. While he occasionally self-identifies ironically as a “script kiddie,” his documented knowledge indicates a deeper understanding of cyber warfare, infrastructure hosting, and cryptography (showing a strong preference for privacy coins like Monero).

Aliases

@Anokin — Primary Telegram handle
Anokin — General alias across cyber communities

Affiliations

Pryx Fanbase / Holyland / Holy discussions (Core participant)
The Jacuzzi / Jacuzzi 5.0 (Prominent member)
Peaceful Groupchat
SiegedSec Cult (Participant)
OGU Chat

Timeline

2024-10-24 — First documented activity in the “Jacuzzi 5.0” Telegram chat.
2024-12-31 — Provides detailed intelligence and OpSec analysis regarding the arrest of threat actor “Kiber Phantom”, noting the actor's critical mistake of bragging about his military deployment in South Korea.
2025-02-15 — Mentions having studied linguistics and speaking 5 languages; advocates for learning C/C++ to understand data structures and memory allocation.
2025-02-16 — Actively advises peers on proper OpSec, outlining a setup utilizing TailsOS, VPNs, and nested virtual machines inside RDPs.
2025-02-18 — Wins a community “election” to gain administrative/council privileges in the “Holy discussions” group.
2025-02-28 — Analyzes the doxxing of community member “Jayze,” attributing it to poor OpSec. Claims to possess the doxes of other prominent actors (Rey, Lazlo) stored on an offline drive.
2026-04-28 — Last known activity in the “DWCusers Chat”.

Related Incidents

Arrest of Kiber Phantom (Provided commentary and insider intel)
Doxxing of Jayze (OpSec analysis)
Hellcat Ransomware Disbandment (Community commentary)

Evidence

Ref	Source	Date	Notes
[1]	The Jacuzzi	2024-12-31	Breaks down the arrest of Kiber Phantom, explaining how bragging about a C17 military station in South Korea led to FBI identification.
[2]	Osint Lovers	2025-02-15	Critiques Python as “overrated” and advises newcomers to learn C++ to understand data types, memory allocation, and buffer overflows.
[3]	Holy discussions	2025-02-16	Provides detailed OpSec advice, recommending the use of TailsOS, VPNs, and VMs routed through RDPs, while discouraging the use of mobile devices for operations.
[4]	Holyland	2025-02-28	Discusses the doxxing of a user named Jayze, attributing it to bad OpSec. Asserts he securely holds the doxes of other threat actors to maintain leverage.
[5]	Holyland	2025-03-07	States he speaks 5 languages and references his linguistic studies.

Notes

Skillset & Philosophy: Anokin shows a clear disdain for “low-tier” social engineering scams (such as calling targets pretending to be Coinbase support). He frequently encourages peers to aim higher, focus on advanced exploits (0-days, ransomware), and maintain strict operational security.
Contested Claims: He casually claimed in one chat to have lost access to $10 million worth of Bitcoin due to a forgotten private key from the early days of crypto. It is unverified if this is factual or simply community posturing.
Interpersonal Dynamics: Despite a cynical worldview and participation in edgy cyber banter, he occasionally steps in to mediate conflicts or defend individuals from community bullying (e.g., defending the user “Sonya”). He maintains a protective but authoritative stance within his main cliques.

Record created: 2026-05-06.