The group's principal activity is to provide network security services. The group provides track and include data on spam, viruses, worms, denial of service attacks, insecure web servers, open proxies, open relays, command and control, irc abuse, name server abuse and behaviors indicative of infected hosts and botnet activity. The group operates from the United States.