French prosecutors confirmed the arrest of an 18-year-old suspected ZeroBytes member over attacks on France’s tax authority and other targets, with a second minor suspect’s devices now under examination. The arrest happened in the Paris region on August 18, and the younger suspect was later released while investigators kept working through the evidence.
The important part is not just custody but what the seized devices may reveal. If investigators can recover aliases, infrastructure, or logs from the phones and computers, they may be able to tie ZeroBytes’ public claims to specific operators and attacks, including the Directorate General of Public Finances breach the group said it carried out.
For defenders in French government, education, and company networks, the exposure is still the uncertainty around attribution and victim mapping rather than a product flaw or active exploit. A single arrest does not end the group’s activity, but device evidence could change which incidents are connected and which victims were never publicly identified.