Zarya
Aliases: UAC-0109
- First seen
- 2022-03-01 00:00:00
- Origin
- RU
- Primary motivation
- ideology
- Sophistication
- intermediate
- Resource level
- team
- Actor type
- hacktivist
- Profile updated
- 2026-07-07 11:50:11
Targeted industries: government-and-public-sector technology-and-telecommunications energy-and-utilities
Targeted regions: country_code:ua
Context
Zarya is a pro-Russian hacktivist group that emerged in March 2022. Initially operating as a special forces unit under the command of Killnet, Zarya has since become an independent entity. The group is primarily known for engaging in Denial-of-Service attacks, website defacement campaigns, and data leaks. Zarya targets government agencies, service providers, critical infrastructure, and civil service employees, both domestically and internationally.
Reports & references
- cip.gov.ua — Download (report)
- Mandiant — Killnet New Capabilities Older Tactics (report)
- cyfirma.com (report)
- reversinglabs.com — The Week In Security Possible Colonial Pipeline 2.0 Ransomware Hurts Small American Eateries (report)
- channellife.com.au — The Increasing Presence Of Pro Russia Hacktivists (report)
- socradar.io — Dark Web Profile Killnet Russian Hacktivist Group (report)