Pro-Russian hacker groups NoName057(16) and Z-Pentest Alliance have claimed joint responsibility for a recent wave of cyberattacks that caused refrigeration equipment in European supermarkets to heat up to +50°C.
Pro-Russian hacker groups NoName057(16) and Z-Pentest Alliance have claimed joint responsibility for a recent wave of cyberattacks that caused refrigeration equipment in European supermarkets to heat up to +50°C.
“To prove that we have a database, we are publishing a sample of over 2,500 lines. It contains logins and passwords of Danfoss employees and customers,” said representatives of NoName057(16).
"The problem is not with 'sinister hackers', but with the systemic negligence of European and American operators, who have ignored basic cybersecurity requirements for years," the Z-Pentest post says.
These statements initially appeared in the groups' Telegram channels, but both channels have now been deleted. Therefore, it is currently impossible to independently confirm the involvement of these hackers in the attack, Cybernews writes .
As of several hours ago — NoName057(16) and by extension Z-Pentest have claimed the recent fridge attacks in Europe. However, I am not convinced it was them, instead they may be claiming the activity after analysts posted it could be them. https://t.co/ozt1dD4Eji
— CyberKnow (@Cyberknow20) November 4, 2026
A threat intelligence researcher on the X network, who first reported the hackers' claims, called CyberKnow, skeptical about their real role, suggesting that the hacktivists may have simply taken credit for the breach after the media began reporting on it.
In the first week of November alone, a wave of cyberattacks hit supermarket refrigeration systems in Belgium, Estonia, Ireland, Luxembourg, the Netherlands, Denmark, Sweden and Finland. Temperatures in freezers reached +50°C, forcing retailers to throw away tons of spoiled food. A month earlier, a similar attack had paralyzed hundreds of supermarkets in France .
Cybersecurity experts note that in Europe, about 13,000 refrigeration systems still run on outdated software with known vulnerabilities, which made them easy targets.
NoName057(16) is a hacker group that emerged in March 2022, immediately after the Russian Federation's full-scale invasion of Ukraine. It is known for attacks on government portals, banks, transport, and media in Ukraine, the US, and the EU. Their main tactic is organized DDoS attacks.
Recall that in the summer of 2025, an international special operation involving law enforcement officers from 12 countries dealt a powerful blow to NoName057(16) . Law enforcement officers neutralized more than a hundred of the group's servers and issued arrest warrants for its key figures.
This is not the first time that NoName057(16) has been investigated. Three members of the group were previously arrested for cyberattacks on Spain and other NATO countries.
Z-Pentest Alliance is a relatively new pro-Russian group formed in late 2024 by former members of NoName057(16) and Cyber Army of Russia Reborn. Instead of classic DDoS, they specialize in attacks on industrial control systems (ICS) in Western countries and Ukraine. Their main targets are water supply facilities, power grids, the oil and gas sector, and agriculture. To hack, Z-Pentest usually looks for industrial control panels that are scanned into the Internet without proper protection or with weak passwords.
