Spanish authorities have arrested four suspected members of a hacktivist group known as Anonymous Fénix, which is accused of launching cyberattacks against government ministries, political parties, and public institutions.
According to the Spanish Civil Guard, the group carried out distributed denial of service attacks against targets in Spain and several South American countries. The group claimed affiliation with the wider Anonymous hacker collective.
Investigators say the first attacks began in April 2023. The group’s activity intensified after severe flash floods hit Valencia in late October 2024. Following the disaster, Anonymous Fénix allegedly targeted multiple government websites, claiming that Spanish authorities were responsible for the deaths and destruction caused by the storm.
Authorities said that from September 2024, the group stepped up its efforts and began recruiting volunteers to participate in cyberattacks. The Civil Guard stated that the campaign reached its peak after the Valencia DANA weather event, when several public administration websites were successfully disrupted.
The group also used social media platforms such as X and Telegram to spread anti-government messages and attract supporters.
In May 2025, police arrested the group’s alleged administrator and moderator in Alcalá de Henares, near Madrid, and in Oviedo in the Asturias region. After reviewing evidence gathered during those arrests, investigators identified two additional key members described as the most active operators. They were arrested earlier this month in Ibiza and Móstoles, near Madrid.
Spanish courts have ordered the seizure of the group’s X and YouTube accounts and the closure of its Telegram channel. Authorities have not disclosed the specific charges the suspects face or the possible penalties.
The arrests come amid a broader crackdown on cybercrime in Spain. In recent months, authorities detained a 19-year-old suspect in Barcelona for allegedly hacking nine companies. Police also dismantled the GXC Team crime as a service platform, which allegedly distributed AI-powered phishing kits, Android malware, and voice scam tools.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
In January, the Spanish National Police arrested 34 individuals suspected of being part of a cyber fraud network linked to the Black Axe criminal organization.
