Spanish authorities have arrested a man suspected of involvement in pro-Russian hacktivist campaigns, including activities linked to Cyber Army of Russia Reborn and NoName. The arrest, which occurred in March but was announced on a Monday, was the result of an investigation initiated by a tip from the FBI in August 2025.
The individual was detained at his home in Palencia. Spanish officials stated that the suspect allegedly provided logistical support to a Ukrainian hacker associated with Cyber Army of Russia Reborn, also known as Z-Pentest. This support reportedly facilitated the Ukrainian hacker's escape to Russia by transiting through Poland and Belarus.
In addition to these alleged actions, the arrested individual is also accused of participating in operations attributed to the hacktivist group NoName057(16). These operations have been documented on geopolitical news sites and are characterized by Spanish authorities as efforts to disseminate pro-Russian and anti-Western narratives.
The FBI's Los Angeles field office coordinated with Spanish law enforcement in the operation, which is part of a broader global initiative called Operation Riptide. This ongoing campaign aims to target cybercriminals and the financial and infrastructural networks they utilize for fraudulent activities.
During the investigation, Spanish police searched the suspect's residence, seizing computers and cryptocurrency storage devices. A cryptocurrency wallet, believed to have been used for receiving payments related to his alleged criminal activities, was also frozen. While the investigation concluded recently, specific charges have not yet been formally announced. However, the suspect is accused of collaborating with a terrorist organization, glorifying terrorism, and damaging computer systems.
Cyber Army of Russia Reborn has been a focus for authorities since 2022, with alleged members targeted for years. The U.S. Treasury Department sanctioned individuals identified as the group's alleged leader and primary hacker, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, in July 2024.
Further actions against individuals linked to these groups include an indictment by the Department of Justice in December 2025 against Victoria Eduardovna Dubranova, a Ukrainian national accused of participating in attacks supporting Russia's geopolitical interests through Cyber Army of Russia Reborn and NoName057(16). Dubranova was extradited to the United States and has since pleaded guilty in two federal cases.
The U.S. State Department has offered substantial rewards for information on individuals associated with these hacktivist organizations. Rewards of up to $2 million are available for information on individuals linked to Cyber Army of Russia Reborn, and up to $10 million for information concerning individuals tied to NoName.
NoName057(16) was reportedly established in October 2018, according to the Department of Justice. In December 2025, multiple federal agencies and international partners issued a joint cybersecurity advisory highlighting the threats posed by pro-Russian hacktivist groups, including Cyber Army of Russia Reborn and NoName.
