Tg1 reports that pro-Russian hacker groups Noname057(16) and Z-Pentest posted a video claiming cyber attacks on supermarket refrigeration systems in several European countries including Italy, saying they exploited Danfoss and Dixell Web devices without malware and warning their capabilities extend to water, power, industrial and food storage systems.

Cyber & Information WarfareCyber AttacksAttacks on critical infrastructure (energy, transport, hospitals)

Aggressor

Summary

Italian state TV news program Tg1, citing its social media profile, reports that two pro-Russian hacker groups, Noname057(16) and Z-Pentest, have released a video on social platforms claiming responsibility for recent cyber attacks against supermarket refrigeration systems in multiple European countries, including Italy. In the video message, attributed jointly to "Noname057(16), in collaborazione con Z-Pentest", the groups say they are "inflicting a devastating blow" to Danfoss and Dixell Web devices used in these systems and stress that they did not need to deploy malware, instead exploiting integrated systems. The message further claims that their reach extends to water supply systems, power plants, industrial facilities and food storage sites, and asserts that similar incidents have affected hundreds of locations across Europe, accusing European operators of not learning from past mistakes. The hackers frame their operations as exposing "the true cost of Western digital maturity" and warn observers to "keep an eye" on their future actions on the global stage. The piece notes that the Italian Cybersecurity Agency has issued an alert over hacker attacks on supermarkets, and links to a related ANSA article describing a government meeting with Undersecretary Mantovano and intelligence services, Interior Minister Piantedosi calling the refrigeration hacks a "coordinated act", and Agriculture Minister Lollobrigida describing them as a "hybrid threat". The primary domain is cyberspace, but the impacts are on critical food cold-chain infrastructure in Italy and other European countries.

Classification

Confidence: High

The article clearly attributes the campaign to pro-Russian hacker groups and focuses on their claimed attacks against critical infrastructure (supermarket refrigeration systems, with stated ability to hit water, power and industrial facilities). This is hostile activity in cyberspace, not defensive preparation, so it fits HYBRID_SIGNAL with an aggressor flag. The outlet (ANSA, via Tg1) is a reputable national news source, but exact timing and full technical details of the intrusions are not s...

Source URL

https://ansa.it/sito/notizie/cronaca/2026/11/04/tg1-due-gruppi-di-hacker-filorussi-rivendicano-attacchi-ai-supermercati_0cc61f52-06bc-4f69-8ba2-fb6d70f5dc79.html

Open source

Provenance

Publisher: extension
Submitted: Nov 4, 2026, 14:10 UTC
Last updated: Nov 8, 2026, 13:49 UTC
Event time: Nov 4, 2026, 12:05 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "de7545cc-ea15-4724-90ad-1dd4d1ba4ff4",
  "url": "https://ansa.it/sito/notizie/cronaca/2026/11/04/tg1-due-gruppi-di-hacker-filorussi-rivendicano-attacchi-ai-supermercati_0cc61f52-06bc-4f69-8ba2-fb6d70f5dc79.html",
  "source": "extension",
  "status": "processed",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Italy",
  "source_reliability": "B",
  "info_credibility": "2",
  "tags": [
    "pro-Russian hackers",
    "Noname057(16)",
    "Z-Pentest",
    "supermarket attacks",
    "refrigeration systems",
    "Danfoss",
    "Dixell Web",
    "critical infrastructure",
    "food supply chain",
    "Italian Cybersecurity Agency alert",
    "Italy",
    "Europe-wide incidents",
    "hybrid warfare",
    "Tg1",
    "social media claim",
    "no malware exploitation",
    "water supply systems",
    "power plants",
    "industrial facilities",
    "food storage sites"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "Italian state TV news program Tg1, citing its social media profile, reports that two pro-Russian hacker groups, Noname057(16) and Z-Pentest, have released a video on social platforms claiming responsibility for recent cyber attacks against supermarket refrigeration systems in multiple European countries, including Italy. In the video message, attributed jointly to \"Noname057(16), in collaborazione con Z-Pentest\", the groups say they are \"inflicting a devastating blow\" to Danfoss and Dixell Web devices used in these systems and stress that they did not need to deploy malware, instead exploiting integrated systems. The message further claims that their reach extends to water supply systems, power plants, industrial facilities and food storage sites, and asserts that similar incidents have affected hundreds of locations across Europe, accusing European operators of not learning from past mistakes. The hackers frame their operations as exposing \"the true cost of Western digital maturity\" and warn observers to \"keep an eye\" on their future actions on the global stage. The piece notes that the Italian Cybersecurity Agency has issued an alert over hacker attacks on supermarkets, and links to a related ANSA article describing a government meeting with Undersecretary Mantovano and intelligence services, Interior Minister Piantedosi calling the refrigeration hacks a \"coordinated act\", and Agriculture Minister Lollobrigida describing them as a \"hybrid threat\". The primary domain is cyberspace, but the impacts are on critical food cold-chain infrastructure in Italy and other European countries.",
  "summary_short": "Tg1 reports that pro-Russian hacker groups Noname057(16) and Z-Pentest posted a video claiming cyber attacks on supermarket refrigeration systems in several European countries including Italy, saying they exploited Danfoss and Dixell Web devices without malware and warning their capabilities extend to water, power, industrial and food storage systems.",
  "summary_extended": null,
  "actor_primary": "Noname057(16)",
  "target_primary": null,
  "location_text": "Italy",
  "location_region": null,
  "location_coordinates_lat": 41.87194,
  "location_coordinates_lon": 12.56738,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly attributes the campaign to pro-Russian hacker groups and focuses on their claimed attacks against critical infrastructure (supermarket refrigeration systems, with stated ability to hit water, power and industrial facilities). This is hostile activity in cyberspace, not defensive preparation, so it fits HYBRID_SIGNAL with an aggressor flag. The outlet (ANSA, via Tg1) is a reputable national news source, but exact timing and full technical details of the intrusions are not s...",
  "event_time_utc": "2026-11-04T12:05:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-11-04T14:10:00.523Z",
  "updated_at": "2026-11-08T13:49:22.709Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "medium",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: MediumSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Nov 4, 2026, 12:05 UTC

Event time confidence

pm24h

Location

Italy

Primary actor

Noname057(16)

Country

Italy

Tags

pro-Russian hackers, Noname057(16), Z-Pentest, supermarket attacks, refrigeration systems, Danfoss, Dixell Web, critical infrastructure, food supply chain, Italian Cybersecurity Agency alert, Italy, Europe-wide incidents, hybrid warfare, Tg1, social media claim, no malware exploitation, water supply systems, power plants, industrial facilities, food storage sites

Loading signal...

{ "id": "de7545cc-ea15-4724-90ad-1dd4d1ba4ff4", "url": "https://ansa.it/sito/notizie/cronaca/2026/11/04/tg1-due-gruppi-di-hacker-filorussi-rivendicano-attacchi-ai-supermercati_0cc61f52-06bc-4f69-8ba2-fb6d70f5dc79.html", "source": "extension", "status": "processed", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)", "country": "Italy", "source_reliability": "B", "info_credibility": "2", "tags": [ "pro-Russian hackers", "Noname057(16)", "Z-Pentest", "supermarket attacks", "refrigeration systems", "Danfoss", "Dixell Web", "critical infrastructure", "food supply chain", "Italian Cybersecurity Agency alert", "Italy", "Europe-wide incidents", "hybrid warfare", "Tg1", "social media claim", "no malware exploitation", "water supply systems", "power plants", "industrial facilities", "food storage sites" ], "nodes": [], "countries": [], "where_text": "Cyberspace", "headline": null, "description": "Italian state TV news program Tg1, citing its social media profile, reports that two pro-Russian hacker groups, Noname057(16) and Z-Pentest, have released a video on social platforms claiming responsibility for recent cyber attacks against supermarket refrigeration systems in multiple European countries, including Italy. In the video message, attributed jointly to \"Noname057(16), in collaborazione con Z-Pentest\", the groups say they are \"inflicting a devastating blow\" to Danfoss and Dixell Web devices used in these systems and stress that they did not need to deploy malware, instead exploiting integrated systems. The message further claims that their reach extends to water supply systems, power plants, industrial facilities and food storage sites, and asserts that similar incidents have affected hundreds of locations across Europe, accusing European operators of not learning from past mistakes. The hackers frame their operations as exposing \"the true cost of Western digital maturity\" and warn observers to \"keep an eye\" on their future actions on the global stage. The piece notes that the Italian Cybersecurity Agency has issued an alert over hacker attacks on supermarkets, and links to a related ANSA article describing a government meeting with Undersecretary Mantovano and intelligence services, Interior Minister Piantedosi calling the refrigeration hacks a \"coordinated act\", and Agriculture Minister Lollobrigida describing them as a \"hybrid threat\". The primary domain is cyberspace, but the impacts are on critical food cold-chain infrastructure in Italy and other European countries.", "summary_short": "Tg1 reports that pro-Russian hacker groups Noname057(16) and Z-Pentest posted a video claiming cyber attacks on supermarket refrigeration systems in several European countries including Italy, saying they exploited Danfoss and Dixell Web devices without malware and warning their capabilities extend to water, power, industrial and food storage systems.", "summary_extended": null, "actor_primary": "Noname057(16)", "target_primary": null, "location_text": "Italy", "location_region": null, "location_coordinates_lat": 41.87194, "location_coordinates_lon": 12.56738, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article clearly attributes the campaign to pro-Russian hacker groups and focuses on their claimed attacks against critical infrastructure (supermarket refrigeration systems, with stated ability to hit water, power and industrial facilities). This is hostile activity in cyberspace, not defensive preparation, so it fits HYBRID_SIGNAL with an aggressor flag. The outlet (ANSA, via Tg1) is a reputable national news source, but exact timing and full technical details of the intrusions are not s...", "event_time_utc": "2026-11-04T12:05:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-11-04T14:10:00.523Z", "updated_at": "2026-11-08T13:49:22.709Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "moderate", "attribution_confidence_band": "medium", "attribution_basis": "single_source" }