3C-INT logo [Cyber]Crime Characterization for Intelligence FREE PREVIEW
You are exploring the Free preview. To unlock full read-only access to all public profiles and in-app notifications, create a free research account. For analyst / premium plans capabilities (editing, advanced tabs, exports), please contact us

Threat Actor Characterization

Back
You’re viewing the read-only version. Sign in for analyst tools (editors, promote draft, file/relations management, etc.)
Desinformador ruso

Desinformador ruso

ID: e19ec40cba09667f1fc3577ac7758b6710401
Cybercrime Cybercriminal Hacktivist
Threat types: Hacktivism, DDoS, Pro‑Russia, Anti‑Atlanticist
Spain ESP
Updated: 2026-04-06
Created: 2026-02-24
Progress: 89% Completeness: 89% Freshness: 90%
Operation zone: Spain
Aliases Limited alias preview
Hybrid Güarrior Hybrid Güarrior Z — —
Actor Network Graph
Open Network Graph
Read-only preview for anonymous visitors. Sign in with a free Research account for full workspace.
MITRE ATT&CK®
confidence: medium
Actor Techniques page ATT&CK® Diagram

Desinformador ruso is a Spanish-language hybrid influence and facilitation identity centered on a Telegram channel and bot. Public reporting and Europol/ENFAST materials identify the alias as associated with a Spanish national wanted by Spain and describe alleged support to the pro-Russian NoName057(16) DDoS ecosystem, including bot-based solicitation for information and the amplification of hostile activity narratives.


Technique Technique name Tactics Evidence
T1585.001 Social Media Accounts TA0042
  • 2026-02-24 — Telegram channel and bot constitute social-media accounts used for communication and recruitment/coordination. · ref
  • 2026-02-24 — Contact bot is referenced for information intake and interaction. · ref
T1591 Gather Victim Org Information TA0043
  • 2025-09-12 — Reporting describes alleged gathering of information on Spain’s critical infrastructure and security-force members to facilitate attacks. · ref
T1589 Gather Victim Identity Information TA0043
  • 2025-09-12 — INFERENCE (confidence: medium): collecting information on security-force members aligns with gathering victim identity information; validate per case details. · ref
T1498 Network Denial of Service TA0040
  • 2025-09-12 — INFERENCE (confidence: medium): reporting links the persona to NoName057(16), a DDoS-focused ecosystem; disruptive activity should be validated with telemetry for each incident. · ref
Strategic Intelligence
Limited preview
Last updated: 2026-04-03T22:10:49+00:00

Desinformador ruso

Classification: Unclassified / Open Source Intelligence (OSINT) — TLP:WHITE

Full strategic intelligence is available in Analyst and Premium plans.
Executive Analyst Brief for CISO
Saved Limited preview

Executive Analyst Brief for Decision Makers — Desinformador ruso


Upgrade to access the full executive brief.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Executive brief now
Saved successfully.
Hunting Playbook
Saved Limited preview

Hunting Playbook — Desinformador ruso


Upgrade to access the full hunting playbook.
Tip: Hover the section title to learn what’s included in Analyst / Premium plans.
Hunting Playbook now
Saved successfully.
IOC Appendix
Saved Limited preview
Last updated: 2026-02-24T20:33:08+00:00

IOC Appendix — Desinformador ruso (Operational Seed Set)


More IOC context for Research. Full appendix for Analyst and Premium plans.
IOC Appendix now
Saved successfully.
OSINT Library
Saved Limited preview
Last saved: 2026-02-24T20:33:19+00:00

OSINT Library — Desinformador ruso


2025-09-12 — Europe’s Most Wanted (ENFAST/Europol) — “ARIAS GIL, Enrique — alias “Desinformador Ruso” (wanted by Spain)”

Full OSINT references available for Research / Analyst.
OSINT Library now
Saved successfully.
Social Medial & Communication
SOCMINT integrated: 0/3
Address Verification SOCMINT
x.com/hyb*********** Restricted Not integrated
Address Verification SOCMINT
t.me/mus********** Restricted Not integrated
t.me/des********** Restricted Not integrated
Notes: preview mode hides sensitive social/contact details.
Reference Images/Associated Evidence Limited
Showing 1–1 of 1 images
Propaganda Free Preview
Propaganda