Silent Crow

Silent Crow is a pro-Ukrainian hacktivist label publicly credited—jointly with the Belarusian Cyber Partisans (BCP)—for the Aeroflot cyber disruption on 28–29 July 2025. Independent coverage and official Russian acknowledgments describe dozens to 100+ flight cancellations, large-scale IT outages, and a criminal investigation. The groups’ statements claimed months-to-a-year of prepositioned access, exfiltration of sensitive data, and destruction of ~7,000 servers; several outlets repeated these points while noting the difficulty of immediate verification. Earlier reporting in January 2025 linked Silent Crow to alleged intrusions at Rosreestr and Rostelecom. The identity and internal structure of Silent Crow remain opaque, and some analysis suggests the name could be a pseudonym/banner rather than a stable organization. Overall, the public record supports credible disruptive impact at Aeroflot, with additional, partly unverified claims about depth of access and destruction. Confidence: medium-high for involvement in Aeroflot disruption; medium/low-to-medium for the broader capability set beyond the airline operation.