Record ID: ACT-0021
Handle(s): @Anokin
Status: Active
First Observed: 2024-10-24

Anokin is an active and technically proficient participant in various underground, cybercrime-adjacent, and hacktivism-focused Telegram communities. Known for his strong grasp of operational security (OpSec) and computer science fundamentals, Anokin frequently acts as an informal advisor to other users, criticizing poor security practices and low-effort fraud schemes.

He demonstrates a solid understanding of low-level programming (advocating for C and C++ over higher-level languages like Python to understand memory allocation), networking, and malware deployment. Anokin is highly analytical regarding the downfalls of other threat actors, frequently breaking down how individuals like “Kiber Phantom” and “Jayze” were arrested or doxxed due to OpSec failures. Aside from his technical acumen, he claims to be neurodivergent, to have studied linguistics, and to speak five languages, including Russian and English. While he occasionally self-identifies ironically as a “script kiddie,” his documented knowledge indicates a deeper understanding of cyber warfare, infrastructure hosting, and cryptography (showing a strong preference for privacy coins like Monero).

• @Anokin — Primary Telegram handle
• Anokin — General alias across cyber communities

• Pryx Fanbase / Holyland / Holy discussions (Core participant)
• The Jacuzzi / Jacuzzi 5.0 (Prominent member)
• Peaceful Groupchat
• SiegedSec Cult (Participant)
• OGU Chat

• 2024-10-24 — First documented activity in the “Jacuzzi 5.0” Telegram chat.
• 2024-12-31 — Provides detailed intelligence and OpSec analysis regarding the arrest of threat actor “Kiber Phantom”, noting the actor's critical mistake of bragging about his military deployment in South Korea.
• 2025-02-15 — Mentions having studied linguistics and speaking 5 languages; advocates for learning C/C++ to understand data structures and memory allocation.
• 2025-02-16 — Actively advises peers on proper OpSec, outlining a setup utilizing TailsOS, VPNs, and nested virtual machines inside RDPs.
• 2025-02-18 — Wins a community “election” to gain administrative/council privileges in the “Holy discussions” group.
• 2025-02-28 — Analyzes the doxxing of community member “Jayze,” attributing it to poor OpSec. Claims to possess the doxes of other prominent actors (Rey, Lazlo) stored on an offline drive.
• 2026-04-28 — Last known activity in the “DWCusers Chat”.

• Arrest of Kiber Phantom (Provided commentary and insider intel)
• Doxxing of Jayze (OpSec analysis)
• Hellcat Ransomware Disbandment (Community commentary)

• Skillset & Philosophy: Anokin shows a clear disdain for “low-tier” social engineering scams (such as calling targets pretending to be Coinbase support). He frequently encourages peers to aim higher, focus on advanced exploits (0-days, ransomware), and maintain strict operational security.
• Contested Claims: He casually claimed in one chat to have lost access to $10 million worth of Bitcoin due to a forgotten private key from the early days of crypto. It is unverified if this is factual or simply community posturing.
• Interpersonal Dynamics: Despite a cynical worldview and participation in edgy cyber banter, he occasionally steps in to mediate conflicts or defend individuals from community bullying (e.g., defending the user “Sonya”). He maintains a protective but authoritative stance within his main cliques.

Record created: 2026-05-06.