Cyber Partisans
Also known as Partisan Zmiy
The Cyber Partisans, a hacktivist group based in Belarus, has been involved in various cyber-attacks targeting organizations and infrastructure in Belarus and Ukraine. They have hacked and wiped the network of the Belarusian Telegraph Agency, targeted the Belarusian Red Cross, and conducted ransomware attacks on the Belarusian Railway and Belarusian State University. The group aims to expose alleged crimes committed by pro-government organizations and disrupt operations supporting the Russian military operation against Ukraine. They have also leaked stolen data to journalists and expressed support for Ukraine.
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
No leak-site posts on record for this group.
Recent activity
- ‘No one will escape responsibility’: Belarusian hackers claim 23TB breach of Russian state data - including war loss files The Belarusian Cyber Partisans and Simastodon · Nov 2, 2026
References
- https://blog.sekoia.io/the-transportation-sector-cyber-threat-overview/
- https://riskybiznews.substack.com/p/risky-biz-news-cyber-partisans-hack
- https://therecord.media/cyber-partisans-belarusian-state-university-attack
- https://therecord.media/pro-ukraine-hackers-leak-russian-data-in-hopes-someone-will-make-sense-of-it/
- https://therecord.media/this-app-will-self-destruct-how-belarusian-hackers-created-an-alternative-telegram-for-activists/
- https://gbhackers.com/partisan-zmiy-malware/
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.