Cyber Army of Russia Reborn: A Pro-Russian Hacktivist Group
Spanish authorities announced the arrest of an alleged member of the pro-Russian hacktivist group Cyber Army of Russia Reborn, a group accused of committing multiple attacks against critical infrastructure providers in the United States and Europe. The arrest, which occurred in March, was made public on Monday.
The suspect, whose name was not released, was detained at his home in Palencia following an investigation triggered by a tip from the FBI in August 2025. FBI agents in the Los Angeles field office coordinated with Spanish officials to capture the alleged cybercriminal as part of Operation Riptide, an ongoing global campaign targeting cybercriminals and the infrastructure and financial networks they use to commit fraud.
Logistical Support and Facilitating Attacks
According to Spanish officials, the arrested man provided logistical support to a Ukrainian hacker linked to Cyber Army of Russia Reborn, also known as Z-Pentest, facilitating the Ukrainian's escape to Russia via Poland and Belarus. The suspect also participated in actions attributed to the pro-Russian hacktivist group NoName057(16), whose operations were later claimed in specialized portals related to geopolitics, with the aim of spreading pro-Russian and anti-Western narratives.
Police investigators searched the suspect's home and seized computers and cryptocurrency storage devices, later freezing a cryptocurrency wallet he allegedly used to receive payment for his alleged crimes. The nearly year-long investigation recently concluded, but authorities did not announce specific charges, other than accusing him of collaborating with a terrorist organization, glorifying terrorism, and damaging computers.
Background on Cyber Army of Russia Reborn
Cyber Army of Russia Reborn, a Russian state-sponsored group, has been active since 2022. The group's alleged leader and primary hacker, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, were sanctioned by the Treasury Department in July 2024. In December 2025, the Justice Department indicted Ukrainian national Victoria Eduardovna Dubranova, accusing her of participating in attacks against critical infrastructure and other victims in support of Russia's geopolitical interests as part of Cyber Army of Russia Reborn and NoName057(16).
Dubranova was extradited to the United States last year and pleaded guilty in two federal cases brought against her. The State Department has been offering potential rewards for up to $2 million for information on individuals associated with Cyber Army of Russia Reborn and up to $10 million for information on individuals associated with NoName.
NoName057(16) and Its Establishment
NoName057(16), also known as NoName, was established by Russian President Vladimir Putin in October 2018, according to the Justice Department. Multiple federal agencies and international partners issued a joint cybersecurity advisory in December 2025 about threats posed by pro-Russian hacktivist groups, including Cyber Army of Russia Reborn and NoName.
The FBI stated that the arrest was part of their efforts to impose costs on cybercriminals wherever they operate, and that they will continue to work together with international partners to target cybercriminals and the infrastructure and financial networks they use to commit fraud.
Together, we will continue to impose costs on cybercriminals wherever they operate.
The investigation and arrest demonstrate the ongoing efforts of law enforcement agencies to disrupt and dismantle pro-Russian hacktivist groups and their operations. As the cyber threat landscape continues to evolve, international cooperation and collaboration will remain crucial in combating these threats.
Source: CyberScoop