NoName057(16)

Threat Actor
41 incidents First seen 2025-12-19 Last seen 2026-10-30
Also known as
NoName057NoNameDDoSia Projectnoname05716DDoSia
Overview

NoName057(16) (también conocido como DDoSia Project o NoName) es un colectivo cibernético hacktivista prorruso activo desde marzo de 2022. Opera principalmente mediante ataques DDoS coordinados dirigidos a entidades gubernamentales, empresas de telecomunicaciones, puertos, banca y transporte en España, Ucrania y países miembros de la OTAN. Distribuye el toolkit multiplataforma "DDoSia" a voluntarios a cambio de recompensas en criptomonedas.

Investigate in CTI Graph Login required Open in Dashboard
Threat ecosystem
Actors Malware Campaigns CVEs
Tap a node for a quick look · double-tap to open its profile
At a glance
peak priority 210
Activity by month (incidents)
2025-122026-10
Sectors targeted
government · 16energy · 10manufacturing · 8finance · 7health · 5defense · 4telecommunications · 3cryptocurrency · 2education · 2media · 2
Countries targeted
RU · 17CA · 15DK · 15GB · 15FI · 14FR · 14NO · 14UA · 14BE · 13DE · 13US · 13AT · 12
Origin
RU · 23US · 12CA · 11GB · 9DE · 8DK · 8
Kinds of incident
Law Enforcement · 10Cyberattack (general) · 9DDoS & Disruption · 7Malware & Botnets · 4Ransomware & Extortion · 3State-Sponsored & Espionage · 3
Techniques seen in incidents
Ddos · 23Ransomware · 16Phishing · 9Botnet · 6Espionage · 6Exfiltration · 4Extortion · 4T1588.001 - Malware · 4Wiper · 4Reconnaissance · 3Social Engineering · 3T1584.006 - Web Services · 3Defacement · 2Impersonation · 2
Related malware
DDoSia · 5BlackCat · 2Cobalt Strike · 2Qilin · 2ALPHV · 1BeaverTail · 1Black Basta · 1Crimson · 1
Related CVEs
CVE-2020-1472 · 1CVE-2024-55591 · 1CVE-2025-2479 · 1CVE-2025-24799 · 1CVE-2025-36934 · 1CVE-2025-41451 · 1CVE-2025-41452 · 1CVE-2025-54957 · 1CVE-2025-64393 · 1CVE-2025-64721 · 1
Incident timeline
2026-10-30
AlienVault OTX Ransomware Live Talos Intelligence BleepingComputer Check Point Research Bluesky Hackmanac Bluesky Hackmanac Bluesky Hackmanac Bluesky Hackmanac BleepingComputer Dailysecu Bluesky Hackmanac AlienVault OTX Ransomware Live Bluesky Hackmanac Data Breaches Security Affairs Data Breaches SOCRadar CTI Blog Bluesky Hackmanac Ransomware Live Ransomware Live Ransomware Live Ransomware Live Dailysecu Ransomware Live Ransomware Live Ransomware Live TheRecord
2026-10-26
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
HackRead
2026-10-11
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-10
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-09
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-08
Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review
Security Affairs
2026-10-08
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-07
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-06
Hackers Exploit Exposed Industrial Controllers to Disrupt US Water and Critical Infrastructure
AlienVault OTX
2026-10-06
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-05
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-04
Raw Threat Intel: Cybercrime Tracker Daily Sync (part 2/6)
Cybercrime Tracker
2026-10-02
Detenido en España un menor acusado de liderar KillSec, un grupo vinculado a unos 1.000 ciberataques
Bit Life Media Bit Life Media
2026-09-22
Network Segmentation Failures Are Expanding the Corporate Attack Surface
Infosecurity-Magazine
2026-08-19
Quién está detrás de NoName057, los 'hackers' que han golpeado la seguridad nacional filtrando datos de policías, militares y guardias civiles
Estrella Digital
2026-07-08
Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip
TheRecord
2026-07-07
CyberScoop HackRead
2026-07-07
Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)
Security Affairs
2026-07-07
Spain arrests suspected member of pro-Russian hacktivist groups
BleepingComputer
2026-05-29
DIL Observatory: when the World Escalates, the Underground Responds
Security Affairs
2026-05-28
Dutch Raid Fails to Dent Russian Bulletproof Host
Dark Reading
2026-05-28
Dutch Raid Fails to Dent Russian Bulletproof Host
Dark Reading
2026-05-28
Palo Alto Palo Alto
2026-05-27
Países Bajos incauta 800 servidores de una empresa de hosting vinculada a ciberataques
Bit Life Media
2026-05-25
Dutch authorities arrest men suspected of providing infrastructure for Russian cyber operations
TheRecord
2026-05-25
Dutch authorities dismantle hosting network allegedly used for cyberattacks and disinformation
Security Affairs
2026-05-22
Netherlands seizes 800 servers of hosting firm enabling cyberattacks
BleepingComputer
2026-04-30
Follow-up to Carrot disclosure: Forgejo
Zero Day Fans
2026-04-29
Europol alerta del salto del cibercrimen: la IA acelera los fraudes, el 'ransomware' y la extorsión digital
Estrella Digital
2026-04-29
Europol alerta del salto del cibercrimen: la IA acelera los fraudes, el 'ransomware' y la extorsión digital
Estrella Digital
2026-03-27
We Are At War
The Hacker News
2026-03-04
149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
The Hacker News
2026-03-04
Telegram Increasingly Used to Sell Access, Malware and Stolen Logs
HackRead
2026-03-03
As War Continues, Pro-Iranian Actors Launch Barrage of Cyberattacks
Dark Reading
2026-03-03
Threat Brief: March 2026 Escalation of Cyber Risk Related to Iran
Palo Alto
2026-02-05
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories
The Hacker News
2026-01-22
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories
The Hacker News
2026-01-19
Russian Hacktivists Intensify Disruptive Cyber Pressure on UK Orgs
Infosecurity-Magazine
2026-01-19
Don't underestimate pro-Russia hacktivists, warns UK's cyber crew
The Register - Cybercrime
2026-01-15
Cyber Threat Actors Ramp Up Attacks on Industrial Environments
Infosecurity-Magazine
2025-12-19
Denmark Blames Russia for "Destructive" Cyber-Attacks
Infosecurity-Magazine