Associated with the GRU, they operate under the guise of hacktivism. They are helping Russia on Telegram

Since the beginning of the Russian invasion of Ukraine, hacktivist groups have besides been active in the war, supporting Putin's army in this way. According to the cybersecurity giant Mandiant, any of them operate only under the guise of "hacktivism", while in fact they are linked to the GRU-sponsored Russian military intelligence group APT28.