Spain Detains Two Suspected Anonymous Members for DDoS Attacks: Hacktivist Cell Dismantled

Summarize with:

ChatGPT Claude.ai Google AI Grok Perplexity

Add as preferred source on Google

Spanish authorities have confirmed the Anonymous arrests, detaining two individuals allegedly affiliated with "Anonymous Fénix," a splinter cell of the global hacktivist collective. The suspects are accused of orchestrating a campaign of cyberattacks against state infrastructure following catastrophic DANA floods in 2024.

The arrests, conducted by the Guardia Civil, took place last week in Ibiza and Móstoles, Madrid.

DDoS Attacks on Public Institutions

The primary tactic employed by Anonymous Fénix involved DDoS attacks on public institutions. The Guardia Civil said several attempts to access government websites were successful.

The operation was coordinated through social media platforms, primarily X (formerly Twitter) and Telegram, where the group recruited participants and disseminated its ideology. However, Fénix's social media presence was relatively small. 

Following the arrests, Spanish authorities have seized the group's X profile, Telegram channel, and a YouTube account. 

Hacktivism Landscape

While Anonymous has seen its global influence wane from its peak, splinter groups continue to emerge, justifying its cyberattacks as a form of protest. Two group leaders were arrested in Alcalá de Henares, Madrid, and Oviedo, Asturias, in May 2025, when Anonymous defaced the GlobalX airline website linked to U.S. deportation flights.

In July 2025, the infrastructure of pro-Russian hacktivists NoName057(16) that focused on striking NATO allies was dismantled in a global crackdown.

Last month, a hacker leaked the alleged data of three Spanish Transport Ministry officials after the Adamuz train crash.

Related

APT28 Deploys Macro Malware in Browser-Based Exfiltration Operation Targeting Europe

Ivanti VPN Flaws Exploited by Chinese Hackers Impacting Almost 120 Organizations, Report Says

CarGurus Data Breach Exposes 12.5 Million User Records in Alleged ShinyHunters Compromise

Cornwall Council Data Breach Exposes Unredacted Complainant PIIs

Cyber Job Moves: Security Leadership Expands Across Enterprise and Cyber Vendors

Critical Infrastructure Under Pressure as AI Threats Grow and Global Enforcement Responds

Your Weekly Cybersecurity Briefing

Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.

Subscribe for Free

Please enter a valid email address.

Most Popular

APT28 Deploys Macro Malware in Browser-Based Exfiltration Operation Targeting Europe

Ivanti VPN Flaws Exploited by Chinese Hackers Impacting Almost 120 Organizations, Report Says

We Tested Windscribe Clear Wi-Fi History Feature on Desktop Apps for Privacy Control - Here is How it Works

CarGurus Data Breach Exposes 12.5 Million User Records in Alleged ShinyHunters Compromise

Cornwall Council Data Breach Exposes Unredacted Complainant PIIs

Threat Actors Leveraged Several Commercial AI Tools to Breach 600 FortiGate Firewalls

APT28 Deploys Macro Malware in Browser-Based Exfiltration Operation Targeting Europe

Ivanti VPN Flaws Exploited by Chinese Hackers Impacting Almost 120 Organizations, Report Says

We Tested Windscribe Clear Wi-Fi History Feature on Desktop Apps for Privacy Control - Here is How it Works

CarGurus Data Breach Exposes 12.5 Million User Records in Alleged ShinyHunters Compromise

Cornwall Council Data Breach Exposes Unredacted Complainant PIIs

Threat Actors Leveraged Several Commercial AI Tools to Breach 600 FortiGate Firewalls