Hacktivist group

CyberTroll Team

CyberTroll Team is a young disruptive actor that emerged in early October 2026 and rapidly became associated with availability-disruption claims against French governmental, regulatory and strategic-sector web resources. Public identifiers include Telegram t.me/CyberTroll5 and X @[redacted].

Actor-controlled publications supplied for this assessment describe six French public-interest and regulatory targets spanning airport environmental oversight, energy-consumer dispute resolution, anti-doping, healthcare-quality guidance, campaign-finance oversight and detention-rights monitoring. Each claim was accompanied by a Check-Host report.

Independent ZATAZ reporting documents a broader 15–17 October campaign in which CyberTroll Team specifically claimed the French SGDSN and was observed within a wider wave of disruptions affecting public services, transport, energy and sensitive industry. ZATAZ states that the published Check-Host conditions showed unavailability but correctly notes that external reachability results do not establish cause.

ZATAZ also reports that CyberTroll Team appeared in early October and affiliated with NoName057(16). This relationship should be modeled as an ecosystem link; NoName057(16) capabilities, infrastructure and incidents must not be inherited by CyberTroll Team without actor-specific evidence.

INFERENCE (confidence: high): CyberTroll Team currently optimizes for symbolic pressure and visible service disruption against state, regulatory and strategic targets rather than for covert persistence or data theft.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-10-19