A couple of days ago the Spanish police arrested several suspects connected to Russian threat actor NoName057(16). After the arrest we see a recent wave of attacks on Spanish organizations involves threat actors who have intensified their activities.
Threat actors are publishing their alleged attacks on their Telegram channels following the arrest of a fellow cybercriminal. Both private and public entities are being targeted, with attackers leaking sensitive data as part of their operations. Private companies and public offices such as the Parliament of several regions are some of the targets.
The attackers are also publishing CheckHost reports to substantiate their claims and demonstrate the legitimacy of their breaches.
