Lyce · Hybrid Watch
hw_9520d36a0fa1571e
Three pro-Russian hackers arrested in Spain over cyber-attacks against public institutions and critical sectors.
Spain’s Civil Guard said that three individuals linked to the pro-Russian hacker group NoName057(16) were arrested for alleged participation in DDoS cyber-attacks against Spanish public institutions, critical infrastructure and essential services in NATO-countries. The suspects were located in the Balearic Islands (Manacor), Huelva and Seville. The hacker group itself declared in its manifesto that it would “respond proportionately” to what it termed Western anti-Russian actions. The attack impacted internal Spanish infrastructure—not just border zones or maritime approaches—highlighting how hybrid threats penetrate deep-inland. The dynamics show how the Russian-linked cyber-toolkit uses distributed attacks to disrupt state institutions and critical sectors, impose cost, and divert resources without resorting to bombs or ships. The arrests also illustrate Spain’s awareness and enforcement response as part of broader allied resilience efforts. While no specific physical damage or sabotage of infrastructure was publicly claimed, the targeting of government and critical-service assets aligns with the hybrid-warfare logic of pressure, destabilisation and signalling by Russian-linked actors.
Attribution
Official
Facts
No facts
Sources
-
- Role
- Discovery lead
- Publication
Spain’s Civil Guard said that three individuals linked to the pro-Russian hacker group NoName057(16) were arrested for alleged participation in DDoS cyber-attacks against Spanish public institutions, critical infrastructure and essential services in NATO-countries. The suspects were located in the Balearic Islands (Manacor), Huelva and Seville. The hacker group itself declared in its manifesto that it would “respond proportionately” to what it termed Western anti-Russian actions. The attack impacted internal Spanish infrastructure—not just border zones or maritime approaches—highlighting how hybrid threats penetrate deep-inland. The dynamics show how the Russian-linked cyber-toolkit uses distributed attacks to disrupt state institutions and critical sectors, impose cost, and divert resources without resorting to bombs or ships. The arrests also illustrate Spain’s awareness and enforcement response as part of broader allied resilience efforts. While no specific physical damage or sabotage of infrastructure was publicly claimed, the targeting of government and critical-service assets aligns with the hybrid-warfare logic of pressure, destabilisation and signalling by Russian-linked actors.