threatintel
actor tracker
NoName057(16)
Reportseverity: Medium2023-06-29

Sekoia tracks DDoSia targeting across NATO and Western Europe

published by Sekoia.io
Actor
NoName057(16)RU · RussiaHacktivist

Pro-Russia hacktivist collective emerged within weeks of the February 2024 full-scale invasion of Ukraine. Operates 'DDoSia' — a paid crowdsourced DDoS platform where Russian-speaking volunteers run…

Summary

Sekoia.io published a detailed analysis of NoName057(16)'s DDoSia project covering May and June 2023, identifying 486 distinct victim websites concentrated in Ukraine and NATO Eastern Flank countries (Lithuania, Poland, Czech Republic, Latvia) with secondary targeting of France, the UK, Italy and Canada. The report documents the project's Telegram-based recruitment (45,000+ subscribers on the main channel by June 2023), cryptocurrency rewards via TON, and rapid retargeting in response to political events such as French air-defence support to Kyiv.

Tags

ddosiaddosnatoreport

Primary source

blog.sekoia.io

Other NoName057(16) events