Hacktivist group

Meduza Cyber Force

Meduza Cyber Force is a low-public-visibility hacktivist identity whose strongest current intelligence value lies in alliance formation. Reporting from late August and early September 2025 records an official alliance with CyTZero and a separate alliance announcement with CyberVolk. The stated purpose of the CyTZero relationship included increased collective strength, visibility and coordinated campaigns.

The evidence supports Meduza as an active relationship node inside a broader hacktivist ecosystem, but it does not yet support a standalone technical profile. Public searches are heavily contaminated by unrelated references to the Russian independent media outlet “Meduza,” making exact actor resolution difficult without a confirmed handle, logo, administrator identity or original alliance post.

The CyberVolk relationship is strategically important because CyberVolk has a much richer demonstrated technical profile. However, CyberVolk ransomware, DDoS, malware-development and RaaS behaviors cannot be transferred to Meduza Cyber Force solely because of the alliance.

Key judgment — medium-high confidence: Meduza Cyber Force should currently be modeled as a coalition-building hacktivist actor whose organizational relevance exceeds its independently documented technical footprint.

INFERENCE (confidence: medium): alliance formation may be intended to compensate for a smaller standalone audience or capability base by pooling visibility, target information, personnel or campaign amplification. No specific resource sharing is yet demonstrated.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-09-15