The Palencia hacker: Russian sabotage or amateur hoax?

The Palencia hacker: between Russian sabotage and a cheap farce

The Spanish National Police have arrested a 34-year-old man in Palencia, Spain, accused of sabotaging critical infrastructure: water networks, irrigation systems, agricultural facilities and a funeral home. According to sources at El Confidencial, investigators link him to pro-Russian cyberterrorist groups such as CyberArmy of Russian Reborn (CARR), Z-Pentest and NoName057(16). The arrest took place in March in coordination with the FBI.

The public reaction, however, has been one of disbelief rather than alarm. The targets described — shutting down a crematorium oven, tampering with the automatic irrigation of parks, altering the chlorine settings of a treatment plant — have provoked more laughter than antiestéticar. "Do they really think a Russian hacker would risk his neck to switch off a crematorium oven?", many ask. The image of a cybercriminal leaving a deceased person half-cremated is hard to take seriously.

The absurdity of the targets

The list of attacks reads like a parody: a funeral home oven, a winery, the chlorination system of a drinking water plant and the motors of a reservoir. "I thought being a hacker was something else," sums up a recurring comment. The disconnect between the alleged threat of hybrid warfare and its materialization in badly programmed sprinklers generates a skepticism bordering on mockery. "If this guy is Pilingui's spearhead, we're in trouble," people quip.

The real vulnerability underneath

But beneath the humor, some more technical analysis points to a troubling issue. As has been detailed, the suspect may have used reverse engineering with software defined radio (SDR) and LoRa to manipulate radio frequency signals that control the devices. The fact that critical infrastructure depends on unencrypted RF signals is a real problem, even if the specific attack is utterly comical. "In Spain, I'm not surprised," one informant laments. The lesson is that if this hacker could do it, anyone with a bit of patience could too.

Smoke screen or genuine warning?

Doubts about the credibility of the police operation are widespread. It is argued that a professional hacker would not connect without covering his tracks from his own home in Palencia. Nor does it seem logical for the Kremlin to deploy an operative to sabotage an automatic irrigation system when it has far more sophisticated means at its disposal. The skepticism is so widespread that some suggest the story could be a media setup to justify an anti-Russian narrative. Others, however, point out that reality sometimes surpasses fiction: "If you were told that Nord Stream was blown up by three weekend divers in a dinghy, this is no more far-fetched."

Beyond the ridicule, the case leaves an uncomfortable aftertaste: Spanish infrastructure is vulnerable due to a lack of basic security. The fact that a private individual was able to tamper with critical systems from Palencia is a fact that no official narrative can gloss over. For now, the debate is whether this hacker is a genius or a fool. Time and the trials will tell.