AlfaNet and Void Hackers Announce a New Technical-Operational Collaboration

Executive Summary

AlfaNet and Void Hackers announced a new collaboration focused on digital infrastructure research, cyberspace analysis, OSINT, cyber intelligence, web analysis, vulnerability research, and specialized software development.

The publication presents the alliance as a combination of analytical and technical resources. Although there is still not enough evidence to measure its real impact, the announcement is relevant because it shows AlfaNet expanding its network of relationships beyond Z-Pentest Alliance.

This carries additional weight because Void Hackers has been associated with the development of VoidRAT, a variant based on QuasarRAT that has remained operational for several years. This does not prove that the malware is part of the new collaboration, but it does provide technical context for the type of capabilities Void Hackers may represent within the announced relationship.

Key Judgments

• AlfaNet adds a new declared alliance with Void Hackers.
• The announcement emphasizes OSINT, web infrastructure analysis, vulnerability research, specialized software, and technical exchange.
• Void Hackers has a background associated with the development of VoidRAT, a variant based on QuasarRAT, which introduces a relevant technical layer for interpreting the collaboration.
• There is not enough evidence to confirm sustained operational integration between both actors or shared use of tools.
• The alliance reinforces AlfaNet’s tendency to build identity through visible collaborations and possible functional division of capabilities.

What Happened

AlfaNet and Void Hackers published a joint statement announcing cooperation in digital infrastructure research and cyberspace analysis.

The declared areas include OSINT, cyber intelligence, web infrastructure analysis, vulnerability research in web applications, specialized software development, exchange of technical and analytical expertise, and monitoring of network activity and digital threats.

The message anticipates that the first joint materials and publications will be presented soon. For now, the statement functions more as an announcement of intent than as evidence of an already executed joint operation.

Operational Assessment

The alliance is relevant because it adds to a pattern of relational visibility. AlfaNet is not only publishing alleged reconnaissance work; it is also seeking to appear linked to other actors with complementary capabilities or interests.

Void Hackers’ association with VoidRAT adds a technical layer to the announcement. While the alliance does not prove shared malware use by itself, it allows the collaboration to be read as more than reputational validation. AlfaNet brings an identity centered on OSINT and infrastructure intelligence, while Void Hackers appears linked to malware capabilities, remote access, and technical development.

In practical terms, this type of collaboration can serve several functions: expanding audience, sharing targets, exchanging findings, validating publications, producing tools, or dividing tasks across reconnaissance, technical analysis, exploitation, and dissemination.

However, the announcement should not be interpreted automatically as organic integration. In hacktivist and crimeware-adjacent ecosystems, many alliances can be tactical, reputational, or short-term. Future evidence will need to show whether there is real joint production or whether the alliance remains mostly communicational.

Intelligence Significance

For tracking AlfaNet, the alliance with Void Hackers is a signal of expansion toward complementary capabilities. This is not just about adding another name to the ecosystem, but about linking with an actor that has a background associated with the development of remote access tools.

In this case, AlfaNet again positions itself as a coordination or exchange node, maintaining a narrative centered on OSINT, infrastructure, and activity against Western targets. Void Hackers, for its part, brings a profile closer to technical development and the malware/RAT ecosystem, which may broaden the operational reading of the collaboration if joint publications appear in the coming weeks.

Analytical Closing

The declared alliance between AlfaNet and Void Hackers does not by itself confirm a mature joint structure, but it does add a relevant signal to the tracking of AlfaNet. The actor continues to expand its visible network and reinforce an identity based on intelligence, technical analysis, and operational collaboration. The association with Void Hackers raises the interest of the signal because it introduces an actor linked to the development of VoidRAT, although it still does not allow inference of shared tool use or sustained coordination. The value of the alliance will depend on whether it produces verifiable joint activity beyond the initial announcement.