HOMETHREATSCyber Alliance
APT / THREAT GROUP HACKTIVISM

Cyber Alliance

🇺🇦Ukraine-attributed
1
campaigns
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

The Ukrainian Cyber Alliance is a pro-Ukraine hacktivist group formed in 2016, primarily targeting Russian entities since the invasion of Ukraine in 2022. They have claimed responsibility for significant cyberattacks, including the destruction of infrastructure at Russian internet provider Nodex and a breach of the microfinance company CarMoney, linked to Vladimir Putin's ex-wife. Their operations involve data destruction and disruption of IT infrastructure, utilizing techniques such as malware attacks and social engineering tactics. The group has positioned itself as a pro-military force, leveraging social media to communicate its activities and objectives.

Threat Analysis

Cyber Alliance is a known-sophistication threat actor attributed to Ukraine, engaged in cyber operations with a primary motivation of hacktivism.

As a hacktivist-aligned entity, Cyber Alliance conducts operations driven by ideological, political, or social grievances, typically through website defacements, DDoS attacks, and the leaking of sensitive data to advance a public narrative.

Known Campaigns

Cyber Alliance — Active Operations March 2026

Cyber Alliance is a hacktivism threat actor attributed to UA. The Ukrainian Cyber Alliance is a pro-Ukraine hacktivist group formed in 2016, primarily targeting Russian entities since the invasion of Ukraine in 2022. They have claimed responsibility for significant cyberattacks, including the destruction of infrastructure at Russian interne...

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Motivation hacktivism
Origin🇺🇦 Ukraine
Aliases1
SourceMalpedia

Also Known As

Cyber Alliance

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.