NoName057(16) Cybercrime Network Disrupted in International Operation

• •NoName057(16) has conducted over 1,500 DDoS attacks since 2022.
• •The group has approximately 4,000 volunteers and operates primarily through Telegram.
• •Operation Eastwood disrupted the group's activities but the threat is expected to persist.

In July 2026, a joint international operation led by Europol disrupted the pro-Russian hacktivist group NoName057(16), known for over 1,500 DDoS attacks against NATO-aligned countries since 2022. The group, with around 4,000 volunteers, initially targeted Ukraine but expanded to include the US and NATO allies. Their attacks have affected various sectors, including government and financial institutions. The operation, dubbed Eastwood, involved 19 countries and aimed to counter Russia's hybrid warfare tactics. Despite this disruption, experts believe the threat from NoName057(16) remains, as the group may regroup and continue its operations. The group recruits volunteers via Telegram, utilizing a tool called DDoSia for crowd-sourced attacks, rewarding participants with cryptocurrency. The assessment of their Telegram activity shows a significant volume of posts related to their attacks and recruitment efforts.