The United States has formally charged 33-year-old Ukrainian national Victoria Dubranova for her alleged cooperation with two of the most active pro-Kremlin hacktivist groups — CARR and NoName057(16). According to investigators, she was involved in cyberattacks targeting critical infrastructure worldwide, including within the US. She faces up to 32 years in prison.
US authorities allege that Dubranova participated in operations conducted in the interests of Russian military intelligence. The first indictment concerns CARR (CyberArmyofRussia_Reborn), a group the US identifies as supervised and financially supported by the GRU. CARR is known for attacks on critical infrastructure, publishing stolen data, and conducting large-scale DDoS campaigns — including strikes against US election systems, water utilities, and nuclear regulatory networks.
The second indictment links her to NoName057(16), the group responsible for over 1,500 DDoS attacks since 2022 targeting NATO member states, Ukraine, and supporting countries. Investigators believe Dubranova helped coordinate or technically support the group’s activity, including distributing its DDoSia tool to global volunteers.
Both groups increasingly collaborated in 2024 and, according to US intelligence, operated partly under the guidance of Russian IT structures such as CISM. Another related group, Z-Pentest — specializing in ICS/OT intrusions — was reportedly formed by members dissatisfied with GRU support levels.
CARR emerged in early 2022 during Russia’s full-scale invasion and markets itself as a “people’s cyber army,” though Western governments attribute its operations to the GRU. NoName057(16) became Russia’s largest DDoS-driven propaganda project, aggressively targeting government agencies and leveraging global volunteers.
Amid escalating cyber incidents, the US has announced reward programs: up to $2 million for information on CARR members and up to $10 million for NoName’s operatives. Dubranova, extradited earlier this year, has pleaded not guilty.
The Dubranova indictments show that the US is intensifying legal action against pro-Russian hacktivist networks linked to state-sponsored activity. As attacks increasingly target critical infrastructure, Washington’s message is clear — participating in such operations carries real consequences, regardless of citizenship or borders.
