Threats · 68 days ago
The useful change is that police are now going after the people who keep pro-Russian hacktivist cells moving, paid, and connected. That matters because support roles like travel help, encrypted coordination, and cash handling can keep a group resilient even when the public-facing operators are known.
Spanish police said they arrested a man in Palencia after an FBI tip linked him to CyberArmy of Russia Reborn, Z-Pentest, and NoName057(16). Investigators say he helped a Ukraine-based hacker escape toward Russia through Poland and Belarus, coordinated with members through encrypted apps, and handled cryptocurrency tied to the activity, showing the pressure is reaching the logistics layer around the groups.
3 sources covering this story
The Record from Recorded Future
Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip
An FBI tip linked a man living in Spain to the hacking groups CyberArmy of Russia Reborn (CARR), Z-Pentest and NoName057(16).
Spain arrests suspected hacker linked to Russian hacktivist campaign
Spain arrested an alleged Cyber Army of Russia Reborn member accused of supporting pro-Russian cyberattacks targeting critical infrastructure in the U.S.
Spain arrests suspected member of pro-Russian hacktivist groups
The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups.
Part of the PlainSec briefing for 2026-07-08