Spain arrests suspected hacktivists for DDoSing govt sites

Bleeping Computer

by Sergiu Gatlan

February 23, 2026

AI-Generated Deep Dive Summary

Spanish authorities have arrested four suspected members of a hacktivist group known as "Anonymous Fénix," which was linked to a series of cyberattacks targeting government websites in Spain and South America. The group claimed affiliation with the broader Anonymous collective and conducted distributed denial-of-service (DDoS) attacks, including during heightened activity following the flash floods in Valencia in late October 2024. Their attacks peaked after the disaster, with members justifying their actions by accusing Spanish authorities of responsibility for the tragedy. The arrested individuals played key roles within the group, including its administrator and moderator, who were initially apprehended in May 2025 in Alcalá de Henares near Madrid and Oviedo in Asturias. Subsequent arrests in Ibiza and Móstoles targeted two additional members identified as highly active operatives following an analysis of evidence from earlier seizures. The Spanish Civil Guard also ordered the closure of the group's social media accounts on X and YouTube, along with its Telegram channel, to curb further dissemination of anti-government messaging. This case highlights the growing threat of hacktivism and cyberattacks against government infrastructure, particularly during periods of heightened public concern or crisis. Anonymous Fénix used platforms like X and Telegram not only to coordinate attacks but also to recruit volunteers for their campaigns, amplifying their impact. The arrests underscore Spain's proactive approach to combating cyber threats, with recent operations also targeting other criminal groups involved in cyber fraud and malware distribution. The incident reflects the broader challenge faced by governments worldwide in addressing hacktivist activity, which often blends political messaging with technical attacks. By dismantling Anonymous Fénix and disrupting its online presence, Spanish authorities have sent a strong message about their commitment to safeguarding national IT infrastructure from such threats. This case also underscores the importance of international cooperation and robust cybersecurity measures in mitigating the risks posed by hacktivist groups.

Verticals

securitytech

Originally published on Bleeping Computer on 2/23/2026