We currently believe he has hacked a few sites via js, XSS, or SQLi & participated in DDoS. Everyone in the group seems to leave this trailing remark: Remarks: "This hack Is response to all Arab lamers We Are : mormoroth - 4shir - Mask0fgod"
Part of the ISCN Hacking Team
Doesn't like Arab lamers
http://www.zone-h.org/archive/notifier=%204shir%20Iran%20digital%20Security
http://www.veecos.net/portal/media/