Spain Arrests Key Members of Anonymous Fénix Hacktivist Group

scsecFebruary 25, 20261 Mins read6 Views

Spanish Authorities Arrest Members of Anonymous Fénix Hacktivist Group

Spanish authorities have arrested four members of the hacktivist group Anonymous Fénix for their involvement in distributed denial-of-service (DDoS) attacks targeting government, political, and public sector websites.

The group’s activity intensified following the catastrophic October 2024 floods in Valencia. In May 2025, Spain’s Civil Guard arrested two individuals suspected of being the group’s administrator and moderator. Earlier this month, two additional members were taken into custody.

Background and Activities
Anonymous Fénix claimed affiliation with the international hacktivist collective Anonymous. The group began operations in April 2023, initially conducting propaganda campaigns on platforms like X and Telegram, targeting Spanish and South American institutions.

By September 2024, the group had expanded its operations, recruiting volunteers to carry out attacks on selected targets. After the Valencia floods, they specifically targeted websites of public administration entities, blaming them for the disaster.

Law Enforcement Actions
Along with the arrests, Spanish authorities seized the group’s social media accounts on YouTube, X, and closed its Telegram channel.

Earlier in February 2026, another cybercriminal was arrested for attacks on over 40 organizations, including NATO, the UN, the US Army, and the International Civil Aviation Organization (ICAO). The suspect, an 18-year-old, allegedly stole sensitive data and leaked it online, using multiple aliases and managing at least 50 cryptocurrency accounts.

The arrests mark a significant effort by Spanish authorities to disrupt hacktivist operations targeting critical organizations and public institutions.

Previous post Lazarus Group Deploys Medusa Ransomware Against U.S. and Middle East Healthcare

1 Comment

scsec says:

February 25, 2026 at 09:19

“Spain’s crackdown on Anonymous Fénix highlights the growing threat of hacktivist attacks on government and public sector systems. Strong cybersecurity defenses are more important than ever.”

Reply