ZeroFox Intelligence Flash Report - Hacktivists Claim Responsibility for Recent Power Outages

Product Serial: F-2025-05-01a

TLP:CLEAR

In this Flash Report, ZeroFox researchers report on recent power outages across Spain, Portugal, and France, responsibility for which has been claimed by the hacktivist collective Dark Storm.

Standing Intelligence Requirements

DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

On April 28, 2025, hacktivist collective “Dark Storm” posted on the social media platform X (formerly Twitter) claiming that—in conjunction with fellow hacktivist group “NoName057”—it was responsible for a recent power outage that affected Spain, Portugal, and parts of Southern France.
Several subsequent posts have been observed within both Dark Storm’s Telegram channel and X account referencing the outages and claiming additional attacks targeting the infrastructure of European nations.
As of this writing, the Spanish government is continuing to investigate the cause of these outages and has publicly denied they are the result of a cyberattack.
While the exact cause of the power outage is currently unclear, it is unlikely that it was caused by a Dark Storm-led distributed denial-of-service (DDoS) attack, as the group very likely lacks the capabilities to conduct such an attack.