INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Russian Hacktivist Linked to Spain's Hacker Arrest

| 2026-07-07 21:57 MEDIUM LOW
JSON
Executive Summary AI-generated
The arrest of a suspected Russian hacker linked to the Cyber Army of Russia Reborn group has been announced by Spanish authorities, marking another chapter in an ongoing global campaign against cybercriminals. The individual, believed to be part of this group, provided logistical support for Ukrainian hackers who escaped to Russia via Poland and Belarus, facilitating their escape with minimal consequences. This arrest is a significant development in the fight against pro-Russian hacktivist groups, which have been linked to various countries including Ukraine, the United States, and Europe.
Technical Mitigations AI-generated
* Implement a robust firewall configuration to block unauthorized access and limit network traffic to sensitive areas. * Conduct regular security audits and penetration testing to identify vulnerabilities and weaknesses in the organization's systems and networks. * Use encryption protocols (e.g. SSL/TLS, PGP) to protect data in transit and at rest, particularly for sensitive information such as financial transactions or personal identifiable information. * Utilize secure authentication mechanisms (e.g. multi-factor authentication, password hashing) to prevent unauthorized access to user accounts and systems. Note: These are general recommendations and may not be applicable to specific situations without further context and consideration of local regulations and industry standards.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Operation Red CircusOperation Red CircusOperation RiptideOperation Riptide DenisDenis
Target & Sectors
EUROPE EUROPE NORTH_AMERICA NORTH_AMERICA CIS CIS energyenergy governmentgovernment
Incident Timeline
‎October 2018
Russian President Vladimir Putin established the NoName hacking group in October 2018.
source_region Russian Federation
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
organisation The State Department
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
organisation NoName
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
‎July 2024
The Treasury Department sanctioned Russian hacktivist group leader Yuliya Vladimirovna Pankratova and primary hacker Denis Olegovich Degtyarenko in July 2024.
source_region Russian Federation
The Treasury Department sanctioned the pro-Russian hacktivist group’s alleged leader and primary hacker, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, in July 2024.
organisation Treasury Department
The Treasury Department sanctioned the pro-Russian hacktivist group’s alleged leader and primary hacker, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, in July 2024.
malware Denis
The Treasury Department sanctioned the pro-Russian hacktivist group’s alleged leader and primary hacker, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, in July 2024.
‎2025/07/07
Spain arrested Dubranova, a suspected hacker linked to Russian hacktivist campaigns.
target_region United States
Dubranova was extradited to the United States last year and pleaded guilty in two federal cases brought against her.
organisation Dubranova
Dubranova was extradited to the United States last year and pleaded guilty in two federal cases brought against her.
‎late 2025
The State Department offered potential rewards for information on individuals associated with the Russian hacktivist campaign, including NoName057(16), also known as NoName.
source_region Russian Federation
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
organisation The State Department
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
organisation NoName
The State Department since late 2025 has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName. NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department.
‎August 2025
Spanish authorities arrested a suspected hacker linked to the Russian hacktivist campaign Cyber Army of Russia Reborn, who provided logistical support and facilitated an escape for a Ukrainian hacker.
attribution FBI
Officials did not name the man who was detained at his home in Palencia following an investigation triggered by a tip from the FBI in August 2025.
organisation Cyber Army
Spanish officials said the arrested man provided logistical support to a Ukrainian hacker linked to Cyber Army of Russia Reborn, also known as Z-Pentest, facilitating the Ukrainian’s escape to Russia via Poland and Belarus.
organisation Z-Pentest
Spanish officials said the arrested man provided logistical support to a Ukrainian hacker linked to Cyber Army of Russia Reborn, also known as Z-Pentest, facilitating the Ukrainian’s escape to Russia via Poland and Belarus.
‎December 2025
The Russian government arrested a Ukrainian woman, Victoria Dubranova, also known as "Vika", in connection with the arrest of multiple individuals linked to Russia's hacktivist campaign.
target_region Russian Federation
In December 2025, the Justice Department indicted Ukrainian national Victoria Eduardovna Dubranova , accusing her of participating in attacks against critical infrastructure and other victims in support of Russia’s geopolitical interests as part of Cyber Army of Russia Reborn and NoName057(16).
Multiple federal agencies and international partners issued a joint cybersecurity advisory in December 2025 about threats posed by pro-Russian hacktivist groups, including Cyber Army of Russia Reborn and NoName.
The arrest also fits into the FBI’s wider Operation Red Circus campaign, announced in December 2025 to counter Russian state-sponsored cyber threats affecting the United States and allied interests.
organisation the Justice Department
In December 2025, the Justice Department indicted Ukrainian national Victoria Eduardovna Dubranova , accusing her of participating in attacks against critical infrastructure and other victims in support of Russia’s geopolitical interests as part of Cyber Army of Russia Reborn and NoName057(16).
target_region Ukraine
In December 2025, the Justice Department indicted Ukrainian national Victoria Eduardovna Dubranova , accusing her of participating in attacks against critical infrastructure and other victims in support of Russia’s geopolitical interests as part of Cyber Army of Russia Reborn and NoName057(16).
In December 2025, US authorities took custody of a Ukrainian woman, Victoria Dubranova, also known as “Vika,” a.k.a.
attribution FBI
The arrest also fits into the FBI’s wider Operation Red Circus campaign, announced in December 2025 to counter Russian state-sponsored cyber threats affecting the United States and allied interests.
source_region United States
The arrest also fits into the FBI’s wider Operation Red Circus campaign, announced in December 2025 to counter Russian state-sponsored cyber threats affecting the United States and allied interests.
In December 2025, US authorities took custody of a Ukrainian woman, Victoria Dubranova, also known as “Vika,” a.k.a.
attribution Operation Red Circus
The arrest also fits into the FBI’s wider Operation Red Circus campaign, announced in December 2025 to counter Russian state-sponsored cyber threats affecting the United States and allied interests.
‎July 6, 2026
Spain's police arrested a suspected hacker linked to Russian hacktivist campaigns.
organisation Z-Pentest
y Z-Pentest 👉 Autores de múltiples ataques contra infraestructuras críticas en #EEUU y #Europa 🔹El detenido mantenía contacto con integrantes de distintos… pic.twitter.com/dx4kiePdJ8 — Policía Nacional (@policia) July 6, 2026
organisation El detenido
y Z-Pentest 👉 Autores de múltiples ataques contra infraestructuras críticas en #EEUU y #Europa 🔹El detenido mantenía contacto con integrantes de distintos… pic.twitter.com/dx4kiePdJ8 — Policía Nacional (@policia) July 6, 2026
organisation @policia
y Z-Pentest 👉 Autores de múltiples ataques contra infraestructuras críticas en #EEUU y #Europa 🔹El detenido mantenía contacto con integrantes de distintos… pic.twitter.com/dx4kiePdJ8 — Policía Nacional (@policia) July 6, 2026
‎2026/07/07
The FBI worked with Spain's National Police to arrest an alleged member of the pro-Russia hacktivist group Cyber Army of Russia Reborn.
organisation SovaSonya
“SovaSonya,” accused of helping the pro-Russia hacking group NoName057(16) , another collective known for launching DDoS attacks against governments and public institutions in Europe.
organisation un
🚩Detenido un presunto colaborador de los grupos terroristas hacktivistas #prorrusos CyberArmy of Russia Reborn (CARR)
organisation CyberArmy
🚩Detenido un presunto colaborador de los grupos terroristas hacktivistas #prorrusos CyberArmy of Russia Reborn (CARR)
organisation Russia Reborn
🚩Detenido un presunto colaborador de los grupos terroristas hacktivistas #prorrusos CyberArmy of Russia Reborn (CARR)
organisation CARR
🚩Detenido un presunto colaborador de los grupos terroristas hacktivistas #prorrusos CyberArmy of Russia Reborn (CARR)
organisation ICS
Security researchers have also linked the group to campaigns targeting industrial control systems (ICS) and critical infrastructure.
Intelligence Sources
HackRead 2026-07-06
CyberScoop 2026-07-07