Signalis
sign in--:--:--UTC
Threat actors

CyberArmy of Russia Reborn

☆ pin
MITRE G1049Also known as Cyber Army of Russia Reborn, CyberArmyofRussia_Reborn, CARR, Z-Pentest
Reports
6
First seen
Jan 5, 2026
Last seen
Aug 10, 2026
Motivation
Hacktivism, Geopolitical, Sabotage

Targeting

Victim regions
Ukraine ×1

Top ATT&CK techniques

T1190 Exploit Public-Facing Application ×3T1566 Phishing ×2T1078 Valid Accounts ×2T1498 Network Denial of Service ×2T1486 Data Encrypted for Impact ×2T1047 Windows Management Instrumentation ×2T1133 External Remote Services ×2T1059 Command and Scripting Interpreter ×2T1003 OS Credential Dumping ×1T1589 Gather Victim Identity Information ×1T1046 Network Service Discovery ×1T1490 Inhibit System Recovery ×1

Indicators

cve ×13domain ×1filename ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2020-12812 (exploited)CVE-2024-42009 (exploited)CVE-2025-14174 (exploited)CVE-2025-43529 (exploited)CVE-2025-55182 (exploited)CVE-2025-5777 (exploited)CVE-2025-59718 (exploited)CVE-2025-59719 (exploited)CVE-2026-15409 (exploited)CVE-2026-15410 (exploited)CVE-2026-25089 (exploited)CVE-2026-39808 (exploited)CVE-2026-48294

Recent reports

High

New Zealand sanctions Russian hackers and propaganda groups over Ukraine war

The Record (Recorded Future News)High

Cyber Brief July 2026 – EU Threat Intelligence Summary

CERT-EU Threat IntelMedium

Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip

The Record (Recorded Future News)Medium

Spain arrests suspected hacker linked to Russian hacktivist campaign

CyberScoopMedium

Spain arrests suspected member of pro-Russian hacktivist groups CARR and Z-Pentest

Bleeping ComputerHigh

Cyber Brief December 2025: Espionage, Ransomware, and Infrastructure Attacks Across Europe and Beyond

CERT-EU Threat Intel

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans