cyber.hendryadrian.com
Security News · dailydarkweb.net

NoName057(16) Claims DDoS Campaign Continues After Operation Eastwood

· Original article ↗

Summary

The article describes more than 1,500 believed DDoS attacks by NoName057(16) and the July 2025 Operation Eastwood disruption. In an interview, the group claimed it resumed activity and plans AI-assisted operations and Tor-based data collection.

Key points

  • The article says NoName057(16) is believed to have carried out more than 1,500 DDoS attacks from March 2022 to June 2025, with activity peaking at about 50 unique targets per day.
  • The group uses DDoSia, which it describes as a crowdsourced platform, to coordinate volunteers; the article says coordination occurs primarily through Telegram.
  • Reported targets include government ministries, financial institutions, transport systems and ports, as well as infrastructure in Israel and Taiwan.
  • Operation Eastwood, coordinated by Europol and Eurojust in July 2025, reportedly led to two arrests, seven international warrants and disruption of more than 100 servers.
  • The article reports that NoName057(16) dismissed the operation and resumed activity within hours; this is not independent confirmation of the group's claims.
  • In the interview, the group said it opened a Tor-based platform to collect sensitive data and plans to expand its use of automation and AI.

Article Details

Event Type
Interview and operational update concerning NoName057(16), its DDoS campaign, and the July 2025 Operation Eastwood law-enforcement disruption.
Impact
The article reports that NoName057(16) is believed to have carried out more than 1,500 DDoS attacks from March 2022 through June 2025 against government, financial, transportation, and critical-infrastructure targets. Operation Eastwood reportedly led to two arrests, seven international arrest warrants, and the disruption of more than 100 servers across 12 countries. The article says the group resumed attacks within hours; its statements about its capabilities, motives, and continued operations are attributed to the group.

MITRE ATT&CK

T1498 · Network Denial of ServiceThe article reports that NoName057(16) carried out DDoS attacks against organizations and infrastructure.

Threat Actors

NoName057(16)The article reports that the pro-Russian hacktivist group has coordinated DDoS attacks since March 2022, and the group claims responsibility for attacks and describes its operations in the interview. The article reports that it resumed operations after the July 2025 Operation Eastwood disruption.

Tools

DDoSiahacktivist group NoName057(16) has coordinated thousands of volunteers via its custom DDoS platform DDoSia to carry out over 1,500 DDoS attacks against governments, financial institutions, transportation

Countries

Belgiumin Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently, infrastructure in Israel and Taiwan, reflectingDenmarkTheir targets have included government ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently,FinlandTheir targets have included government ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently,IsraelTargets have included government ministries, financial institutions, ports, transport systems, and recent infrastructure in Israel and Taiwan.Latviagovernment ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently, infrastructure in Israel andLithuaniaTheir targets have included government ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently,NetherlandsTheir targets have included government ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently,RomaniaOur attacks always have a reason. If we talk about the latter, Romania has concluded an agreement with the Kiev terrorist regime, and we are attacking Israel because the blood of innocent Iranians is on the hands of itsRussiaSince March 2022, days after Russia launched its full-scale invasion of Ukraine, a hacktivist group calling itself NoName057(16) has been waging a relentless digital campaign against governments, financial institutions,TaiwanTargets have included government ministries, financial institutions, ports, transport systems, and recent infrastructure in Israel and Taiwan.UkraineSince March 2022, days after Russia launched its full-scale invasion of Ukraine, a hacktivist group calling itself NoName057(16) has been waging a relentless digital campaign against governments, financial institutions,

Industries

Critical infrastructure1,500 DDoS attacks against governments, financial institutions, transportation networks, and critical infrastructure worldwide.GovernmentTargets have included government ministries, financial institutions, ports, transport systems, and recent infrastructure in Israel and Taiwan.PortsTargets have included government ministries, financial institutions, ports, transport systems, and recent infrastructure in Israel and Taiwan.Transportationplatform DDoSia to carry out over 1,500 DDoS attacks against governments, financial institutions, transportation networks, and critical infrastructure worldwide.

Related Articles