NoName057(16) — Hacktivist Profile
NoName057(16) is a prolific pro-Russian hacktivist group operating the DDoSia platform to coordinate DDoS attacks against NATO-supporting countries.Also tracked as
DDoSia Project, DDoSia, NoName057, NoName05716
IntelFusions coverage (9)
- Keymous+ Launches #Op_Epstein_Gulf: DDoS Campaign Hits Jordan, Oman, and Kuwait Government Portals 2026-03-04 · Cyber Incidents
- The Hacktivist Network: Keymous+, the Holy League Alliance, and the Rise of Federated Cyber Operations 2026-02-16 · Cyber Incidents
- Hacktivism-as-a-Service: How Keymous+ Monetized Disruption Through the EliteStress DDoS Platform 2026-02-16 · Cyber Incidents
- Keymous+: Profile of a North African Hacktivist Collective Claiming 700+ DDoS Attacks in 2025 2026-02-16 · Cyber Incidents
- NoName057(16) DDoSia 2024: FreeBSD and 32-bit Architecture Expansion, Machine GUID Fingerprinting, and Daily C2 Rotation Amid 20,000-Member Telegram Network 2026-02-16 · Cyber Incidents
- NoName057(16) DDoSia Reverse Engineered: AES-GCM Target Decryption, Wagner Group Attack Anomaly, and Geopolitically-Triggered RATP Campaign 2026-02-16 · Cyber Incidents
- NoName057(16) DDoSia Go Rewrite: C1+P1+P2 Proxy Architecture, Token Authentication with 0xF Rolling Increment, and Automatic Bot Updater Enabling Hours-Long Recovery After Takedowns 2026-02-16 · Cyber Incidents
- NoName057(16) Infrastructure Exposed: Prometheus Monitoring, RabbitMQ/Redis Backend, and 84% Attack Traffic from MIRhosting and Stark Industries 2026-02-16 · Cyber Incidents
- Polish ABW Attributes Sejm DDoS to NoName057(16) as Retaliation for Russia Terrorism Designation, Warns of Escalating Hybrid Cyber Operations 2026-02-16 · Cyber Incidents
Tools & malware
- Bobik botnet
- DDoSia DDoS toolkit
Recent claimed victims
- Belgian Government Services 2025-11-01
Vendor research
- Following NoName057(16) DDoSia Project's Targets Sekoia
- Inside DDoSia: NoName057(16)'s Pro-Russian DDoS Campaign Infrastructure Recorded Future (Insikt Group)
- Beware of DDosia, a botnet created to facilitate DDoS attacks Avast
- Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure (AA25-343a) CISA (FBI, NSA and partners)
- International operation disrupts pro-Russian hacker group NoName057(16) The Record (Recorded Future News)
- Pro-Russia DDoSia hacktivist project sees 2,400% membership increase BleepingComputer
Countries linked to this actor
- Estonia targets
- Sweden targets
- Latvia targets
- Lithuania targets
- United Kingdom targets
- Germany targets
- France targets
- Taiwan targets
- Japan targets
- South Korea targets
- Poland targets
- Italy targets
- Netherlands targets
- Belgium targets
- Czech Republic targets
- Spain targets
- Switzerland targets
- Moldova targets
- Austria targets
- Albania targets
- Cyprus targets
- Luxembourg targets