Z-Pentest Alliance
Also known as Z-Pentest
Z-Pentest Alliance is a pro-Russian hacktivist group known for targeting industrial control systems and operational technology systems, particularly in Italy and Israel. The group has claimed responsibility for various attacks, including gaining control of a water supply management system and disrupting aviation authorities' websites. Z-Pentest Alliance operates within a larger alliance of hacktivist groups, often collaborating on politically motivated operations, including DDoS campaigns. The group has been linked to the GRU and is associated with the NoName057 group, sharing tools and intelligence.
CVEs in recent coverage
- 8.2CVE-2025-41450Danfoss AK-SM 8xxA Series · 1 mention with this actor
Recent victims
No leak-site posts on record for this group.
Recent activity
- 🇫🇷 🔓 FUITE DE DONNÉES NoName057(16) et Z-Pentest, deux groupes de hackers prorusses revendiquent les cyberattaques des frigos 🔗 https:// infonewscyber.fr/inmastodon · Nov 4, 2026
- European supermarket freezer attacks: cross-source analysis of 11 reports (Danfoss / Copeland XWEB, two waves, attribution still open)reddit · Nov 4, 2026
References
- https://socradar.io/blog/telegram-activity-timeline-iran-israel-us-war/
- https://www.intel471.com/blog/winter-olympics-2026-hacktivism-surges-ahead-of-protests-and-suspected-sabotage
- https://www.picussecurity.com/resource/blog/how-noname05716-uses-ddosia-to-attack-nato-targets
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
