Threat Intelligence & APT The Record 1 month ago

French prosecutors confirm arrest of suspected ZeroBytes hacker behind tax cyberattack

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Alicia Christin Gerald / Unsplash French prosecutors confirm arrest of suspected ZeroBytes hacker behind tax cyberattack French authorities detained an 18-year-old suspected member of the ZeroBytes hacking group over cyberattacks targeting the country's tax authority The suspect was arrested in the Paris region on August 18 and placed in pretrial detention two days later. A second suspect,..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Laptop
Image: Alicia Christin Gerald / Unsplash

French prosecutors confirm arrest of suspected ZeroBytes hacker behind tax cyberattack

French authorities detained an 18-year-old suspected member of the ZeroBytes hacking group over cyberattacks targeting the country's tax authority and other organizations, the Paris prosecutor's office confirmed to Recorded Future News.

The suspect was arrested in the Paris region on August 18 and placed in pretrial detention two days later. A second suspect, who is under 16, was arrested on August 26 and later released while investigators examine his devices, prosecutors said Tuesday in response to a media inquiry. 

The arrests are part of an investigation into ZeroBytes, a French-speaking hacking group that has claimed attacks against French government agencies, schools and companies since mid-July.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →