AntiMalware•July 21, 2026•🇷🇺Translated from Russian

Russia's Supreme Court Bans Silent Crow and Cyberpartisans BY as Extremist Organizations

The Supreme Court of the Russian Federation has recognized the cybercriminal groups Silent Crow (also known as the Silent Crow) and Cyberpartisans BY as extremist organizations and prohibited their activities on Russian territory. The decision is subject to immediate enforcement following a closed session in which the court granted an administrative claim filed by the General Prosecutor's Office.

According to the ruling, both groups conducted coordinated attacks on the information infrastructure of Russia and Belarus. Their stated goals, as presented by the authorities, include destabilizing the socio-political situation and effecting an unconstitutional change of state power.

The court established that Cyberpartisans BY belong to the Belarusian association Supratsiv (Resistance), which advocates the violent alteration of the republic's constitutional order. The group was further connected to the Polk named after Kastus Kalinouski, already banned in Russia, and to a subunit of information-psychological operations within the Armed Forces of Ukraine.

Silent Crow, previously operating under the names CyberWar and Cyber LegionsUA, is characterized in the judgment as a pro-Ukrainian alliance of politically motivated hacktivists. Its principal objective, according to the court, is to inflict damage on Russian government agencies, commercial enterprises, and critical information infrastructure.

The groups are accused of carrying out cyberattacks against the IT systems of Aeroflot, databases belonging to Rostelecom and Rosreestr, as well as servers of the Belarusian Railway. As a result of the ruling, both Silent Crow and Cyberpartisans BY now hold not only a digital but also an official extremist status in Russia, making participation in their activities or provision of support subject to criminal or administrative liability.

Related articles

AntiMalware•Policy & Regulation

VK Files Lawsuit in EU Court Seeking to Overturn Sanctions Imposed in July

Russian internet company VK has submitted a formal challenge to the European Union's sanctions regime by filing a case with the Court of Justice of the European Union. The company argues that the restrictions placed on VK and its subsidiary Communication Platform LLC are both unjustified and unlawful. The lawsuit, registered under case number T-664/26 on 7 October, directly contests the July sanctions that targeted the developer of the MAX messenger. Earlier restrictions had already led to the removal of multiple VK ecosystem applications from Apple App Store and Google Play, forcing users toward alternative distribution channels such as RuStore, Huawei AppGallery, Samsung Galaxy Store and Xiaomi GetApps. While installed Android applications continue to function and receive updates, iOS users face disrupted push notifications after the apps were delisted. The legal action itself does not automatically restore app availability in the affected stores.

Securitylab•Policy & Regulation

VPN Rules in Russia 2026: No Fine for Ordinary Users but Strict Penalties for Advertising and Extremist Content Access

As of September 2026, Russia maintains no separate administrative fine for ordinary citizens simply connecting to a VPN service. Responsibility arises only for specific actions such as deliberately searching for known extremist materials, advertising tools to bypass restrictions, or failing to comply with Roskomnadzor demands as a service operator. Corporate VPNs used for remote access to company networks remain fully legal under exceptions in Article 15.8 of Law No. 149-FZ. New provisions in the Code of Administrative Offenses, including Articles 13.53, 13.52 and 14.3 introduced by Laws 281-FZ and 282-FZ, impose fines ranging from 3,000 to 500,000 rubles depending on the violation and the offender category. The rules distinguish clearly between end users, service owners and advertisers. VPN technology itself is not banned, yet public services face ongoing blocking and operators must integrate with state filtering systems. The material reflects the regulatory situation on 24 September 2026.

Habr•Policy & Regulation

Troubleshooting Erroneous TSPU Blocks: How Admins Can Collaborate with Russian Regulators

A Moneta client outage traced back to erroneous filtering on Russia's TSPU system rather than internal infrastructure or DDoS protection. Engineers used curl, traceroute, nping, and custom Python scripts to confirm TCP payload-based blocking after the handshake. The team submitted a request via the VTS personal account, received partial acceptance status, then escalated to DCOA and SSOP to obtain the specific TSPU site number. Detailed network traces and active traffic were required for diagnostics. The case highlights coordination challenges between operators, DCOA, and SSOP when erroneous blocks occur on information resources.

AntiMalware•Policy & Regulation

Security Vision Unveils Self-Assessment Portal for Unified Information Security Evaluation Across Corporate Holdings

Security Vision has launched a new Self-Assessment portal designed to consolidate information security self-evaluations for entire corporate groups and holdings. The platform addresses common challenges where subsidiaries maintain inconsistent compliance records, with some requirements fulfilled while others remain unresolved for years in scattered emails and spreadsheets. Security Vision SA covers the complete workflow from defining requirements and distributing questionnaires to calculating results and tracking remediation actions. Parent organizations gain a consolidated view of subsidiary compliance status along with detailed breakdowns by individual systems. The system supports requirement templates, version control, scheduled assessments, automated metric-based answers, and conversion of gaps into actionable plans with assigned owners and deadlines. Additional features include internal policy document management and interactive dashboards for analysis. The first public demonstration is scheduled for the SOC Forum on October 27-28.