cyber.hendryadrian.com
Security News · ncsc.gov.uk

NCSC Warns of Continued Pro-Russian Hacktivist DDoS Targeting

· Original article ↗

Summary

The NCSC says pro-Russian hacktivists, including NoName057(16), continue targeting UK and global organisations with DDoS attacks, and urges organisations to strengthen resilience and review their defences.

Key points

  • NoName057(16) has been active since March 2022 and has targeted government and private-sector entities in NATO states and other European countries.
  • The group has frequently attempted DDoS attacks against UK local government and operates through Telegram channels.
  • The group has used GitHub and other sites to host its DDoSia tool and share tactics with followers.
  • The NCSC says the ideologically motivated threat has evolved to target UK operational technology.
  • The NCSC advises organisations to review DoS protections, clarify responsibilities with service providers, and consider upstream DDoS mitigation and content delivery networks.
  • Organisations should plan for service scaling and graceful degradation, preserve administrative access, and test and monitor their defences.

Article Details

Event Type
NCSC warning about continued pro-Russia hacktivist activity targeting UK and global organisations.
Impact
The reported attacks aim to disrupt operations, take websites offline, and disable services. NoName057(16) has made frequent DDoS attempts against UK local government, and the article says Russian-aligned activity now also targets UK operational technologies.

MITRE ATT&CK

T1498 · Network Denial of ServiceThe article reports frequent distributed denial-of-service attempts against UK local government.

Threat Actors

NoName057(16)Pro-Russian hacktivist group reported to have conducted attacks against government and private-sector entities in NATO member states and other European countries.

Tools

DDoSiaTelegram channels and used GitHub (and other websites and repositories) to host the proprietary tool DDoSia, and to share tactics, techniques, and procedures (TTPs) with their followers.

Countries

United KingdomRussian-aligned hacktivist groups continue to target the UK and global organisations by attempting to disrupt operations, take websites offline and disable services.

Industries

Critical infrastructureIn December 2025, the NCSC co-sealed an advisory highlighting that pro-Russian hacktivists groups have been conducting worldwide cyber operations against numerous organisations and critical infrastructure sectors.Governmentthe group NoName057(16) has been active since March 2022, and have been conducting attacks against government and private sector entities in NATO member states and other European countries that are perceived as

Related Articles