Ethical Hacking News
Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)
The Spanish police arrested a suspect linked to two pro-Russian hacktivist groups, CyberArmy of Russia Reborn (CARR) and Z-Pentest. The suspect allegedly provided logistical support to a Ukrainian hacker linked to CARR, evading capture by routing through two countries. The suspect used encrypted messaging applications to coordinate with other members of terrorist groups, including NoName057(16). Proceeds from stolen or compromised information flowed through crypto accounts, indicating a financial dimension to the operation.
The Spanish police have made a significant move in their efforts to combat cybercrime and terrorism by arresting a man linked to two pro-Russian hacktivist groups, CyberArmy of Russia Reborn (CARR) and Z-Pentest. This arrest is part of an ongoing FBI-led investigation that has been underway since last August.
According to the Spanish National Police, the suspect was involved in providing logistical support to a Ukrainian hacker who was linked to CARR. The suspect allegedly helped the foreign hacker evade capture by routing an escape through two countries, which puts his actions far beyond keyboard activism. He also used various encrypted messaging applications to maintain contact with other members of these terrorist groups, coordinating actions and providing support for their activities.
The suspect was found to be participating in operations attributed to NoName057(16), another pro-Russian hacktivist group whose attacks were subsequently claimed on geopolitical websites to spread pro-Russian and anti-Western messaging. The police pointed out that there was a financial dimension to the operation, with proceeds from the sale of stolen or compromised information flowing through crypto accounts.
The investigation was conducted by the General Information Commissariat of the National Police, the FBI, and the Provincial Information Brigade of Palencia, under the direction of the Central Court of Instance number One and the National Court’s Prosecutor’s Office. CARR and Z-Pentest have been active against water utilities, energy infrastructure, and industrial control systems across the US and Europe.
CARR is a pro-Russian hacktivist group known for targeting government agencies, critical infrastructure, and industrial systems across Europe and the United States, mainly through DDoS attacks and disruptive cyber operations. Z-Pentest is another pro-Russian cyber group that supports similar campaigns, often coordinating attacks aligned with Moscow’s geopolitical interests. Both groups blend ideological messaging with offensive cyber activity and have been linked to attacks on energy, water, and public-sector organizations.
The arrest of the suspect provides a significant breakthrough in the investigation into these two groups, which are considered to be part of a larger network of pro-Russian hacktivists. The Spanish police have shown that they are taking a proactive approach to combating cybercrime and terrorism, and this arrest is a testament to their efforts.
Related Information:
https://www.ethicalhackingnews.com/articles/Spanish-Police-Crack-Down-on-Pro-Russian-Hacktivist-Groups-CARR-and-Z-Pentest-ehn.shtml
https://securityaffairs.com/194894/hacktivism/spanish-police-arrest-man-linked-to-carr-z-pentest-and-noname05716.html
https://www.theregister.com/security/2026/07/07/alleged-pro-russia-hacktivist-arrested-in-palencia/5267569
https://www.socinvestigation.com/comprehensive-list-of-apt-threat-groups-motives-and-attack-methods/
https://www.sweat-digital.com/who-is-z-pentest-inside-2025s-most-notorious-hacktivist-group/
https://thecyberexpress.com/russian-threat-group-z-pentest/
Published: Tue Jul 7 14:34:53 2026 by llama3.2 3B Q4_K_M
