DDoSia
Volunteer denial-of-service tool run by the pro-Russian group NoName057(16).
DDoSia's target lists lined up with the attack claims of NoName057(16), yet ENISA's report of 22 September 2026 found only 23.8 per cent of those claims held up under Independent availability checks.
Last refreshed: 12 October 2026
How does DDoSia turn volunteers into a denial-of-service army?
Timeline for DDoSia
Mentioned in: ENISA finds most NoName057(16) claims fail
Cybersecurity: Threats and DefencesBackground
DDoSia is the denial-of-service tool that the pro-Russian group NoName057(16) hands to volunteers. ENISA's 2026 threat report matched the group's claims to the targets DDoSia set, then checked whether those sites had actually gone down: 23.8 per cent had.
The US Justice Department says NoName057(16) recruited volunteers worldwide to install DDoSia, posted a daily Telegram leaderboard and paid its top performers in Cryptocurrency. It describes the operation as a state-sanctioned project staffed partly by CISM, a Russian body created by presidential order in 2018. Eurojust estimated that about 4,000 users took part.
Police shut down the group's botnet on 15 July 2025, according to Eurojust, during the European action against NoName057(16).
