{"id":32279,"date":"2026-08-12T13:11:57","date_gmt":"2026-08-12T11:11:57","guid":{"rendered":"https:\/\/zero.bs\/?p=32279"},"modified":"2026-08-12T13:27:13","modified_gmt":"2026-08-12T11:27:13","slug":"anatomy-of-a-noname05716-campaign","status":"publish","type":"post","link":"https:\/\/zero.bs\/en\/anatomy-of-a-noname05716-campaign\/","title":{"rendered":"Anatomy of a NoName057(16)"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"32279\" class=\"elementor elementor-32279\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"ob-is-breaking-bad elementor-section elementor-top-section elementor-element elementor-element-77cbf9a elementor-section-boxed elementor-section-height-default elementor-section-height-default neuron-fixed-no\" data-id=\"77cbf9a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ob_bbad_use_it&quot;:&quot;yes&quot;,&quot;_ob_bbad_sssic_use&quot;:&quot;no&quot;,&quot;_ob_glider_is_slider&quot;:&quot;no&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-16 elementor-top-column elementor-element elementor-element-e6727c9\" data-id=\"e6727c9\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;_ob_bbad_is_stalker&quot;:&quot;no&quot;,&quot;_ob_teleporter_use&quot;:false,&quot;_ob_column_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_column_has_pseudo&quot;:&quot;no&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-66 elementor-top-column elementor-element elementor-element-5c301a5\" data-id=\"5c301a5\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;_ob_bbad_is_stalker&quot;:&quot;no&quot;,&quot;_ob_teleporter_use&quot;:false,&quot;_ob_column_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_column_has_pseudo&quot;:&quot;no&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8a3cbf9 ob-has-background-overlay elementor-widget elementor-widget-image\" data-id=\"8a3cbf9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_photomorph_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs.png\" data-elementor-open-lightbox=\"yes\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MzIyODEsInVybCI6Imh0dHBzOlwvXC96ZXJvLmJzXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvbm9uYW1lLWFuYXRvbXktb2YtYS1ub25hbWUwNTctMTYtY2FtcGFpZ24taW5zaWRlLXJ1c3NpYXMtcm90YXRpbmctZGRvcy13YXItb24tZXVyb3BlX3plcm9icy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs-1024x576.png\" class=\"attachment-large size-large wp-image-32281\" alt=\"Anatomy of a NoName057(16) Campaign: Inside Russia&apos;s Rotating DDoS War on Europe - zeroBS\" srcset=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs-1024x576.png 1024w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs-300x169.png 300w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs-768x432.png 768w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs-18x10.png 18w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-anatomy-of-a-noname057-16-campaign-inside-russias-rotating-ddos-war-on-europe_zerobs.png 1266w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3e422b1 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"3e422b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>NoName Attack Pattern<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32346b5 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"32346b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Anatomy of a NoName057(16) Campaign: Inside Russia's Rotating DDoS War on Europe<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5720fbf ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"5720fbf\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>A weekly (occasionally fortnightly), single-country blitz has become the signature rhythm of Europe&#8217;s most persistent pro-Russian hacktivist collective. Here&#8217;s how one of these campaigns actually runs &#8211; and why Germany keeps ending up on top of the target list.<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b7f3e8 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"4b7f3e8\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">The Gang<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f5b5c0b ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"f5b5c0b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>NoName057(16) surfaced within days of Russia&#8217;s full-scale invasion of Ukraine in March 2022, and has been the <strong>most consistently<\/strong> active pro-Russian hacktivist outfit ever since. Unlike the loose, meme-driven KillNet &#8222;universe&#8220; it eclipsed in 2023, NoName is a single, disciplined operation: it develops and maintains its own DDoS tool, DDoSia, and distributes it free of charge to volunteers recruited through Telegram. Participants run the Go-based client on their own machines, register through the @DDosiabot, and are rewarded in cryptocurrency according to a leaderboard tied to how many targets they help take down.<\/p><p>The group is not financially motivated. Its Telegram channel frames every wave of attacks as retaliation &#8211; for arms shipments to Ukraine, for sanctions, for a politician&#8217;s remarks, for a law-enforcement operation against its own infrastructure. That framing is the key to understanding how a &#8222;campaign&#8220; is built.<\/p><p>In July 2025, an international law-enforcement effort coordinated by Europol and Eurojust &#8211; <strong>Operation Eastwood<\/strong> &#8211; disrupted more than 100 servers tied to the group and produced seven arrest warrants (six issued by Germany, one by Spain) plus two arrests and 24 house searches across Czechia, France, Germany, Italy, Poland and Spain. NoName&#8217;s Telegram channel dismissed the operation within days and announced &#8222;**Operation Time of Retribution**,&#8220; publishing fresh target lists for the twelve countries involved in the takedown &#8211; Germany chief among them. The group has operated more or less continuously since.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bdf1ff7 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"bdf1ff7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">The Weekly Campaign Model<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a4b204 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"6a4b204\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>he operating rhythm that has emerged since late 2023 is remarkably consistent:<\/p><p>&#8211; <strong>Cadence:<\/strong> a new primary target country is selected roughly every seven days. Single-week campaigns have been logged with volumes ranging from ~2,600 to over 8,100 recorded attack entries, spread across 100\u2013170 unique domains and 90\u2013190 unique IP addresses.<\/p><p>&#8211; <strong>Concentration:<\/strong> one country typically absorbs 40\u201390% of that week&#8217;s attack volume, with the remainder spread across Ukraine (a near-permanent secondary target), international commercial (.com) domains, and one or two supporting countries.<\/p><p>&#8211; <strong>Update tempo:<\/strong> target lists are refreshed multiple times a day via Telegram &#8211; 27 separate list updates (an average of 3.9 a day) were counted during the first week of March 2026 alone, with bursts of three or four updates inside a 35-minute window.<\/p><p>&#8211; <strong>Daily rhythm:<\/strong> a year-long analysis of activity (July 2024\u2013July 2025) found that operators add new targets in two distinct daily waves, peaking between 05:00\u201307:00 UTC and around 11:00 UTC on weekdays &#8211; a pattern consistent with operators working a standard Russian business day.<\/p><p>&#8211; <strong>Infrastructure churn:<\/strong> the same analysis found that command-and-control servers rotate fast, with an average Tier-1 lifespan of about nine days, which roughly tracks the length of a campaign itself.<\/p><p>&#8211; <strong>Duration:<\/strong> most single-country pushes last about a week before the group pivots elsewhere. A second full week on the same country is unusual &#8211; but it happens when a country stays in the news (an arms-supply vote, an anniversary of a law-enforcement action, a diplomatic dispute) or when NoName is explicitly retaliating, as it did against Germany in the weeks after Operation Eastwood in July\u2013August 2025.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c87cbcc ob-has-background-overlay elementor-widget elementor-widget-image\" data-id=\"c87cbcc\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_photomorph_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs.png\" data-elementor-open-lightbox=\"yes\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MzIyODIsInVybCI6Imh0dHBzOlwvXC96ZXJvLmJzXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvbm9uYW1lLWR1cmF0aW9uLWNvdW50cmllc196ZXJvYnMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"571\" height=\"1024\" src=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs-571x1024.png\" class=\"attachment-large size-large wp-image-32282\" alt=\"NoName - Duration - Countries - zeroBS\" srcset=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs-571x1024.png 571w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs-167x300.png 167w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs-768x1376.png 768w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs-7x12.png 7w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-duration-countries_zerobs.png 837w\" sizes=\"(max-width: 571px) 100vw, 571px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-43a07e1 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"43a07e1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">The Target-Sector Playbook<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-229d375 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"229d375\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The industries NoName hits are strikingly stable &#8211; a legacy, in part, of KillNet&#8217;s own 2022 playbook, which was concentrated on public administration and government services, logistics and transportation (rail, subway, harbours, airports), banks and payment providers, and energy. NoName inherited and refined that list. Pulling together public activity from 2023 through mid-2026, the recurring target categories break down as:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c5a6b2 elementor-widget__width-initial ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"4c5a6b2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h6>The consistent core, present in almost every campaign:<\/h6><p>&#8211; <strong>Public administration &amp; government<\/strong>, at every level &#8211; federal ministries, state\/regional governments, municipal portals, tax and revenue offices. One year-long dataset put government\/public-sector targets at <strong>41.09%<\/strong> of all recorded attacks, by far the largest single category.<\/p><p>&#8211; <strong>Public transport &amp; logistics<\/strong> &#8211; airports, railways, transit and ticketing systems, ports and port authorities. This was NoName&#8217;s breakout specialty in June 2023, when it pivoted hard onto ports and logistics companies across at least a dozen countries (Bulgaria, Lithuania, Latvia, Canada, Poland, Spain, the Netherlands, Sweden, Germany, Greece, Finland and Italy) in a single week. The same year-long dataset puts transportation\/logistics at <strong>12.44%<\/strong> of all attacks.<\/p><p>&#8211; Banks &amp; financial services &#8211; retail banks, central banks, stock exchanges, payment processors. Denmark&#8217;s banks, Polish payment provider Dotpay, and Deutsche B\u00f6rse have all been claimed targets at different points.<\/p><h6>Frequently recurring, campaign to campaign:<\/h6><p>&#8211; <strong>Energy &amp; utilities<\/strong> &#8211; grid operators, water companies, oil and gas firms (a category KillNet pioneered against Poland&#8217;s PGNiG and ORLEN in 2022, and one Israel&#8217;s IEC and Mekorot fell into in March 2026).<\/p><p>&#8211; <strong>Telecommunications<\/strong> &#8211; national carriers and ISPs; telecom is repeatedly flagged as a heavily targeted sector, and the same year-long dataset puts technology\/media\/communications at 10.19%.<\/p><p>&#8211; <strong>Media outlets<\/strong>, including minority-language and regional press &#8211; a symbolic, high-visibility target.<\/p><p>&#8211; <strong>Political organisations<\/strong> &#8211; party websites, individual politicians&#8216; pages, parliaments, and election-related infrastructure. During the run-up to the June 2024 European Parliament elections, NoName and allied groups hit political parties and voter portals in the Netherlands, Slovenia, Denmark and Sweden in a single coordinated week.<\/p><h6>Situational but recurring depending on the target country&#8217;s profile:<\/h6><p>&#8211; <strong>Defence &amp; aerospace<\/strong> when the target has a defence-export profile, as Israel does. In the March 2026 campaign, Elbit Systems, Rafael, and Israel Aerospace Industries were all hit as a cluster.<\/p><p>&#8211; <strong>Public procurement &amp; tender platforms<\/strong> &#8211; an escalation first documented at scale in March 2026, when NoName hit at least 17 separate German procurement portals (DTVP, eVergabe-Online, eVergabe-MV\/NRW, Vergabemarktplatz Brandenburg, and others) for a combined 974 attack entries, or 13% of that week&#8217;s total traffic &#8211; an unprecedented concentration on a single functional category of government infrastructure.<\/p><p>&#8211; <strong>Cultural &amp; heritage institutions<\/strong> &#8211; museums, cathedrals, foundations. Symbolic rather than disruptive; Naumburg Cathedral (a UNESCO World Heritage site) and the Moritzburg Foundation have both appeared on German target lists.<\/p><p>&#8211; <strong>Weapon manufacturers<\/strong> &#8211; flagged specifically in the pre-EU-election 2024 wave.<\/p><p>&#8211; <strong>Civil society, NGOs and religious\/political organisations<\/strong> &#8211; the March 2026 Israel component pulled in a wide mix of religious-political and agricultural-cooperative sites alongside the defence and banking targets.<\/p><p>&#8211; <strong>Tax authorities<\/strong> &#8211; a Bavarian district tax-office cluster plus Germany&#8217;s national ELSTER e-filing portal absorbed 447 attack entries in the March 2026 wave, timed to the German tax-filing period.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0839b75 ob-has-background-overlay elementor-widget elementor-widget-image\" data-id=\"0839b75\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_photomorph_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs.png\" data-elementor-open-lightbox=\"yes\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MzIyODMsInVybCI6Imh0dHBzOlwvXC96ZXJvLmJzXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvbm9uYW1lLVRvcC0zLUluZHVzdHJpZXMtYXR0YWNrZWQtYnktTm9OYW1lX3plcm9icy5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"992\" height=\"480\" src=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs.png\" class=\"attachment-large size-large wp-image-32283\" alt=\"Top 3 Industries attacked by NoName - zeroBS\" srcset=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs.png 992w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs-300x145.png 300w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs-768x372.png 768w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-Top-3-Industries-attacked-by-NoName_zerobs-18x9.png 18w\" sizes=\"(max-width: 992px) 100vw, 992px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61a93df ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"61a93df\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Case study: Germany, the recurring favourite<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-13b02c9 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"13b02c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>No single NATO country appears on NoName&#8217;s target lists as often as Germany. German authorities have logged <strong>14 separate waves of NoName attacks since November 2023<\/strong>, affecting more than 250 companies and institutions. Three recent weekly campaigns illustrate why, and how the pattern repeats with variations:<\/p><p><strong>29 December 2025 \u2013 4 January 2026 (&#8222;New Year&#8220; campaign)<\/strong>. Germany absorbed 88% of that week&#8217;s 2,637 attack entries across 115 domains &#8211; one of the most concentrated single-country weeks on record. Unusually, over 80% of the targets were private-sector rather than government: cultural institutions (Naumburg Cathedral), political-party regional chapters (SPD Saxony-Anhalt), a regional airport (Baden-Airpark), a Sorbian-language newspaper, and a procurement platform (Tender24), alongside the more conventional municipal government targets. Analysts read the New Year timing as a deliberate choice to exploit reduced holiday-period defensive staffing.<\/p><p><strong>2\u20138 February 2026 (shared with Italy)<\/strong>. Germany took 29.5% of an 8,101-entry week, with Italy as the larger share (42.9%) &#8211; a reminder that not every &#8222;German week&#8220; is Germany-only; the group frequently runs two national fronts in parallel.<\/p><p><strong>2\u20138 March 2026 (shared with Israel)<\/strong>. Germany was again dominant, at 65.6% of 7,512 entries, with Israel a substantial secondary front at 19.7%. This is the week that produced the procurement-portal blitz described above, plus a geographically dispersed hit-list concentrated in Saxony-Anhalt &#8211; including the personal site of the state&#8217;s Minister-President, Reiner Haseloff, and the city portal of Magdeburg, the site of the December 2024 Christmas-market attack, whose inclusion was read by analysts as a deliberate attempt to compound an already-traumatised city&#8217;s difficulties. On the technical side, that week&#8217;s traffic split almost evenly between GET floods (23.3%) and SYN floods (22.2%), with a 9.6% slice of nginx_loris slow-connection attacks aimed at exhausting server connection pools rather than bandwidth &#8211; and 72.9% of all traffic aimed squarely at port 443 (HTTPS), i.e. services that can&#8217;t simply be switched off as a mitigation measure.<\/p><p>Outside the weekly-tracker data, Germany also produced the clearest real-world casualty of the group&#8217;s 2026 activity: on <strong>17 February 2026<\/strong>, a multi-wave DDoS attack knocked out Deutsche Bahn&#8217;s website, its DB Navigator app, and station departure boards for several hours. Train control and signalling were unaffected &#8211; the attack hit customer-facing systems only &#8211; but it ran in parallel with attacks on other NATO countries and was quickly attributed to NoName057(16)&#8217;s DDoSia tooling, prompting public comment from BSI President Claudia Plattner on the growing strategic weight of DDoS as a tool of geopolitical pressure.<\/p><p>And the group&#8217;s own framing leaves little doubt about motive: German officials and researchers alike have tied the post-Eastwood surge directly to the arrest warrants Germany issued against alleged NoName leadership, and separately to German political decisions on Ukraine support &#8211; including, in an earlier 2025 wave, backlash against Chancellor Friedrich Merz&#8217;s plans to supply Taurus cruise missiles.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cb97c92 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"cb97c92\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">The rotation ledger<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-04004de ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"04004de\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Pulling together weekly public activity tracking for the winter\/spring 2026 season shows the rotation in full:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-784cec9 ob-has-background-overlay elementor-widget elementor-widget-image\" data-id=\"784cec9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_photomorph_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs.png\" data-elementor-open-lightbox=\"yes\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MzIyODQsInVybCI6Imh0dHBzOlwvXC96ZXJvLmJzXC93cC1jb250ZW50XC91cGxvYWRzXC8yMDI2XC8wOFwvbm9uYW1lLXNoYXJlLW9mLXRoYXQtd2Vla3MtYXR0YWNrLXZvbHVtZV96ZXJvYnMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"992\" height=\"880\" src=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs.png\" class=\"attachment-large size-large wp-image-32284\" alt=\"NoName - Share of that week&apos;s attack volume - zeroBS\" srcset=\"https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs.png 992w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs-300x266.png 300w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs-768x681.png 768w, https:\/\/zero.bs\/wp-content\/uploads\/2026\/08\/noname-share-of-that-weeks-attack-volume_zerobs-14x12.png 14w\" sizes=\"(max-width: 992px) 100vw, 992px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aff63e5 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"aff63e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Two of ten tracked weeks put Germany on top &#8211; more than any other single country in this window, though not as a single unbroken fortnight. The closest thing to a genuine multi-week German campaign in the public record is the post-Eastwood &#8222;revenge&#8220; wave: Cybervandals tracked German local-administration and police sites going down within five days of the July 2025 takedown, and NoName&#8217;s own Telegram announcement of &#8222;Operation Time of Retribution&#8220; named 16 German targets on the same day it declared the crackdown a failure &#8211; a wave that was still &#8222;hitting hard and succeeding&#8220; more than a month later.<\/p><p>The group has also shown it will borrow allies to extend a national campaign: it worked with <strong>ServerKillers<\/strong>, another pro-Russian outfit, against Spanish government and EU-linked sites in January\u2013February 2026, and separately joined forces with pro-Iranian groups <strong>MuddyWater and CyberAv3ngers<\/strong> for a combined Germany\u2013Israel push that hit roughly 6,000 targets across 143 domains, with heavy telecom-sector focus.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a910e2 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"3a910e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Why the rotation exists<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b264677 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"b264677\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The pattern is best read as an editorial calendar rather than a random walk. NoName&#8217;s own Telegram messaging consistently frames a new week&#8217;s target country in terms of a specific grievance &#8211; sanctions, arms deliveries, a diplomatic statement, a NATO summit, a law-enforcement action &#8211; which lets the group claim political relevance for what is, technically, a low-sophistication attack type. Rotating the primary target also has a practical defensive benefit for the attackers: it prevents any single country&#8217;s CERTs, CDNs and ISPs from settling into a steady-state mitigation posture, forcing a fresh scramble roughly every seven days. Germany&#8217;s outsized share of the rotation reflects its outsized role in the underlying conflict it&#8217;s being punished for &#8211; NATO&#8217;s largest European economy, one of Ukraine&#8217;s most consequential military and financial backers, and the country that issued most of the Eastwood arrest warrants.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1e819d7 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"1e819d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Selected references<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1849085 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"1849085\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Cybervandals &#8211; NoName057 is back<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/noname057-is-back\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/noname057-is-back\/<\/a><\/span><\/p><p><strong>Ports and Logistics are the new Targets of NoName057<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/ports-and-logistics-are-the-new-targets-of-noname057\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/ports-and-logistics-are-the-new-targets-of-noname057\/<\/a><\/span><\/p><p><strong>DDoS-Attacks on EU-Institutions by russian activist<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/attacks-on-eu-by-russian-activist-summarized\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/attacks-on-eu-by-russian-activist-summarized\/<\/a><\/span><\/p><p><strong>DDoS as Attackvector for State-Sponsored\/Hacktivist-Groups in Times of Crisis<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/ddos-as-attackvector-for-state-sponsored-hacktivist-groups-in-times-of-crisis\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/ddos-as-attackvector-for-state-sponsored-hacktivist-groups-in-times-of-crisis\/)<\/a><\/span><\/p><p><strong>Hacktivists in Ukraine-Russia Conflict<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/swithak\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/swithak\/<\/a><\/span><\/p><p><strong>Tracking DDoS &#8211; Botnets<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/blog.kybervandals.com\/tracking_botnets\/\" target=\"_blank\" rel=\"noopener\">https:\/\/blog.kybervandals.com\/tracking_botnets\/<\/a><\/span><\/p><p><strong>SOCRadar weekly DDoS Threat Intelligence \u2014 [Germany, 29 Dec\u20134 Jan]<\/strong> <br \/><span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/ddos-threat-intelligence-germany-5-jan26\/\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/ddos-threat-intelligence-germany-5-jan26\/<\/a><\/span><\/p><p><strong>Italy &amp; Germany, 2\u20138 Feb<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/italy-germany-under-ddos-9-feb26\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/italy-germany-under-ddos-9-feb26\/)<\/a><\/span><\/p><p><strong>Czechia, 19\u201325 Jan<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/ddos-threat-intelligence-czechia-26-jan26\/\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/ddos-threat-intelligence-czechia-26-jan26\/<\/a><\/span><\/p><p><strong>Multi-Country, 26 Jan\u20131 Feb<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/ddos-threat-intelligence-multi-country-3-feb26\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/ddos-threat-intelligence-multi-country-3-feb26\/)<\/a><\/span><\/p><p><strong>Spain, 16\u201323 Feb<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/spain-under-ddos-23-feb26\/\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/spain-under-ddos-23-feb26\/<\/a><\/span><\/p><p><strong>Germany &amp; Israel, 2\u20138 Mar<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/germany-israel-under-ddos-10-mar26\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/germany-israel-under-ddos-10-mar26\/)<\/a><\/span><\/p><p><strong>Operation Eastwood coverage<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/operation-eastwood-targets-noname05716\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/operation-eastwood-targets-noname05716\/)<\/a><\/span><\/p><p><strong>Dark Web Profile: NoName057(16)<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/socradar.io\/blog\/dark-web-profile-noname05716\/\" target=\"_blank\" rel=\"noopener\">https:\/\/socradar.io\/blog\/dark-web-profile-noname05716\/<\/a><\/span><\/p><p><strong>Recorded Future \/ Insikt Group \u2014 Inside DDoSia: NoName057(16)&#8217;s Pro-Russian DDoS Campaign Infrastructure<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/www.recordedfuture.com\/research\/anatomy-of-ddosia\" target=\"_blank\" rel=\"noopener\">https:\/\/www.recordedfuture.com\/research\/anatomy-of-ddosia<\/a><\/span><\/p><p><strong>Europol \/ EU Neighbours East \u2014 Global operation targets NoName057(16) pro-Russian cybercrime network<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/euneighbourseast.eu\/news\/latest-news\/global-operation-targets-noname05716-pro-russian-cybercrime-network\/\" target=\"_blank\" rel=\"noopener\">https:\/\/euneighbourseast.eu\/news\/latest-news\/global-operation-targets-noname05716-pro-russian-cybercrime-network\/<\/a><\/span><\/p><p><strong>The Record (Recorded Future News) \u2014 International operation disrupts pro-Russian hacker group NoName057(16)<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/therecord.media\/international-police-takedown-noname-hacker\" target=\"_blank\" rel=\"noopener\">https:\/\/therecord.media\/international-police-takedown-noname-hacker<\/a><\/span><\/p><p><strong>Computer Weekly \u2014 European cyber cops target NoName057(16) DDoS network<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/www.computerweekly.com\/news\/366627802\/European-cyber-cops-target-NoName05716-DDoS-network\" target=\"_blank\" rel=\"noopener\">https:\/\/www.computerweekly.com\/news\/366627802\/European-cyber-cops-target-NoName05716-DDoS-network<\/a><\/span><\/p><p><strong>Security Today (DE) \u2014 Q1 2026: The Five Most Dangerous Cyber Incidents in Germany<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/www.securitytoday.de\/en\/2026\/03\/28\/q1-2026-the-five-most-dangerous-cyber-incidents-in-germany-and-what-they-have-in-common\/)\" target=\"_blank\" rel=\"noopener\">https:\/\/www.securitytoday.de\/en\/2026\/03\/28\/q1-2026-the-five-most-dangerous-cyber-incidents-in-germany-and-what-they-have-in-common\/)<\/a><\/span><\/p><p><strong>Dark Reading \u2014 DDoSia Powers Affiliate-Driven Hacktivist Attacks<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/ddosia-powers-volunteer-driven-hacktivist-attacks\" target=\"_blank\" rel=\"noopener\">https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/ddosia-powers-volunteer-driven-hacktivist-attacks<\/a><\/span><\/p><p><strong>Wikipedia \u2014 Noname057(16)<\/strong> <span style=\"text-decoration: underline;\"><a href=\"https:\/\/en.wikipedia.org\/wiki\/Noname057(16)\" target=\"_blank\" rel=\"noopener\">https:\/\/en.wikipedia.org\/wiki\/Noname057(16)<\/a><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c6d3c6 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"6c6d3c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">You are under DDoS-Threat, by NoName or others?<\/h5>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5dd5fc1 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"5dd5fc1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Our DDoS Threat Simulation Platform \u201e<span style=\"text-decoration: underline;\"><a href=\"https:\/\/avydos.com\/en\/\" target=\"_blank\" rel=\"noopener\">Avydos<\/a><\/span>\u201c is the platform of choice for automated DDoS testing. Built as a self-service cloud platform with 24\/7 availability, it gives you full control to run DDoS simulations whenever you need them &#8211; quickly, independently, and without external dependencies.<\/p><p>The platform covers all attack vectors, from high-volume Layer 3\/4 attacks to sophisticated Layer 7 application attacks, including both single and multi-vector combinations. This broad coverage helps to uncover weaknesses in defenses that simpler tests often miss.<\/p><p>At the same time, <span style=\"text-decoration: underline;\"><a href=\"https:\/\/avydos.com\/en\/\" target=\"_blank\" rel=\"noopener\">Avydos<\/a><\/span> is perfectly designed to support compliance efforts. It helps organizations meet requirements under <span style=\"text-decoration: underline;\"><a href=\"https:\/\/zero.bs\/dora-ddos-resilience-testing\/\" target=\"_blank\" rel=\"noopener\">DORA<\/a><\/span>, NIS2, and similar regulations by providing continuous, documented resilience testing and clear reporting that auditors and regulators expect.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6feb488 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-text-editor\" data-id=\"6feb488\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_postman_use&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Avydos DDoS Threat Simulation and Automation Platform: <span style=\"text-decoration: underline;\"><a href=\"https:\/\/avydos.com\/en\/\" target=\"_blank\" rel=\"noopener\" data-wplink-edit=\"true\">https:\/\/avydos.com\/en\/<\/a><\/span><\/p><p>zeroBS DDoS Testing Services: <span style=\"text-decoration: underline;\"><a href=\"https:\/\/zero.bs\/en\/\" target=\"_blank\" rel=\"noopener\">https:\/\/zero.bs\/en\/<\/a><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26ed393 ob-harakiri-inherit ob-has-background-overlay elementor-widget elementor-widget-heading\" data-id=\"26ed393\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_use_harakiri&quot;:&quot;yes&quot;,&quot;_ob_harakiri_writing_mode&quot;:&quot;inherit&quot;,&quot;_ob_harakiri_text_clip&quot;:&quot;none&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Infos &amp; Contact<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dfc9a1e elementor-align-left elementor-mobile-align-center elementor-widget__width-initial ob-has-background-overlay elementor-widget elementor-widget-button\" data-id=\"dfc9a1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_ob_butterbutton_use_it&quot;:&quot;no&quot;,&quot;_ob_perspektive_use&quot;:&quot;no&quot;,&quot;_ob_poopart_use&quot;:&quot;yes&quot;,&quot;_ob_shadough_use&quot;:&quot;no&quot;,&quot;_ob_allow_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_widget_stalker_use&quot;:&quot;no&quot;}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"#elementor-action%3Aaction%3Dpopup%3Aopen%26settings%3DeyJpZCI6IjMwNDY5IiwidG9nZ2xlIjpmYWxzZX0%3D\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Get in touch<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-16 elementor-top-column elementor-element elementor-element-633d58c\" data-id=\"633d58c\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;_ob_bbad_is_stalker&quot;:&quot;no&quot;,&quot;_ob_teleporter_use&quot;:false,&quot;_ob_column_hoveranimator&quot;:&quot;no&quot;,&quot;_ob_column_has_pseudo&quot;:&quot;no&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>NoName Attack Pattern Anatomy of a NoName057(16) Campaign: Inside Russia&#8217;s Rotating DDoS War on Europe A weekly (occasionally&#8230;<\/p>","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[31],"tags":[],"class_list":["post-32279","post","type-post","status-publish","format-standard","hentry","category-insides-and-usecases"],"acf":[],"_links":{"self":[{"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/posts\/32279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/comments?post=32279"}],"version-history":[{"count":17,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/posts\/32279\/revisions"}],"predecessor-version":[{"id":32302,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/posts\/32279\/revisions\/32302"}],"wp:attachment":[{"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/media?parent=32279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/categories?post=32279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.bs\/en\/wp-json\/wp\/v2\/tags?post=32279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}