Hacktivist group

SMESHARIKI HACKER GROUP

The entity branded as «Смешарики» is referenced in open reporting as a pro‑Russia hacktivist group involved in hack‑and‑leak style claims against Ukraine-linked targets. The most concrete, repeated OSINT references place «Смешарики» as a co-claimant with Perunswaroga in two separate narratives: (1) a claimed compromise of a Ukrainian service for veterans (December 2025) and (2) a claimed compromise of the Ukrainian DNA-testing clinic network MamaPapa (February 2026), including a stated large-volume data exfiltration claim and a public site notice attributing disruption to «Смешарики».

A critical analytic caveat is name collision: “Smeshariki/Смешарики” is also the name of a well-known Russian children’s cartoon brand. OSINT clearly uses the term as a hacktivist label in the incidents cited here, but defenders should avoid conflating unrelated entertainment channels or spam channels that reuse the same name.

Confidence is medium–high that «Смешарики» is an active brand used in pro‑Russia hacktivist claim ecosystems (multiple sources and cross-posts reference claims). Confidence is low–medium on the full scope of technical capability and the exact compromise method because publicly accessible victim-side telemetry is limited and the reporting is largely claim-driven.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-22