Europol has added Enrique Arias Gil, a former Spanish university professor, to its most wanted list over allegations of aiding pro-Russian hacker group NoName057(16).
Arias Gil, 37, is accused of collecting intelligence on Spain’s critical infrastructure and security forces to support cyberattacks, as well as threatening journalists and business leaders backing Ukraine. He faces charges including computer damage for terrorist purposes, membership in a criminal organization, and glorifying terrorism.
According to Spanish media, Arias Gil is currently residing in Russia after receiving a scholarship from the Russian House, a state-funded cultural institute. A Spanish National Court has issued an international arrest warrant, though authorities believe that cooperation from Moscow is unlikely.
The former political science lecturer and author is also believed to operate a Spanish-language Telegram channel named Desinformador Ruso (“Russian Disinformer”), which promotes cyberattacks by NoName057(16) and another pro-Russian group, Z-Pentest. The channel was launched in March 2024.
Two days after being listed as wanted, Arias Gil posted a defiant message on the channel, demanding Spanish authorities drop the case or face the release of alleged compromising material on senior officials.
NoName057(16), active since the onset of Russia’s full-scale invasion of Ukraine in 2022, is known for its low-level but disruptive DDoS attacks on government and corporate targets across NATO countries. In July, its infrastructure was hit by Operation Eastwood, a joint effort by European and US authorities that took down over 100 servers and flagged more than 1,000 suspected supporters. Spanish officials have labeled NoName057(16) “one of the most active groups” targeting Ukraine and its allies, with several alleged members arrested in Spain and France last year.