Hacktivist group

Z-Pentest Alliance

Origin: Serbia Status: Active Confidence: Confirmed

Z-Pentest Alliance is a pro-Russia-aligned hacktivist coalition brand frequently cited in OSINT as a high-tempo actor focused on critical infrastructure narratives and, notably, internet-exposed OT/ICS environments. Multiple OSINT sources describe a shift beyond traditional hacktivist DDoS and defacement toward unauthorized access to industrial control interfaces (HMI/SCADA) and the public release of videos to amplify psychological impact.

Government and international reporting on pro-Russia hacktivism highlights opportunistic exploitation of weak remote-access exposures (including VNC) to access OT devices and conduct disruptive operations. In this context, Z-Pentest is consistently positioned among the more prominent pro-Russia-aligned brands targeting critical infrastructure.

Confidence is high that the Z-Pentest Alliance brand is used within pro-Russia hacktivist ecosystems and is strongly associated with OT/ICS-themed intimidation and disruption narratives. Confidence is medium regarding the true operational impact of claimed OT “sabotage,” as several sources assess some claims as primarily psychological and not necessarily resulting in material operational disruption.

Created by iQBlack CTI Team

Contributors 1

Last updated 2026-08-20

ATT&CK

MITRE ATT&CK

T0889Modify Program

T1021.005VNC

T1210Exploitation of Remote Services

T1498Network Denial of Service

T1585.001Social Media Accounts

Research

Selected OSINT

Morningstar Moves Under the Control of Z-Pentest AllianceiQBlack Threat Intel Insight Earthimpact, Z-Alliance and AlfaNet Announce an Operational Union Within the Pro-Russian EcosystemiQBlack Threat Intel Insight Z-Pentest Alliance in its own words: full interview on structure, alliances, and operational limitsiQBlack Threat Intel Insight Z-Pentest Alliance and ambiguity as structure: an intelligence reading of an exclusive interviewiQBlack Threat Intel Insight Z-Pentest and NoName057(16) Put Canadian Water Systems at the Center of Pro-Russian OT/ICS PressureiQBlack Threat Intel Insight