NoName057(16)
Pro-Russian hacktivist group that runs DDoS campaigns against European targets.
NoName057(16) is the pro-Russian DDoS group to which ENISA attributed 48 per cent of ideology-driven activity in 2025; only 23.8 per cent of its claims that ENISA assessed held up, according to the agency's 22 September 2026 threat report.
Last refreshed: 12 October 2026 · Appears in 1 active topic
Do pro-Russian DDoS claims overstate what the attacks actually achieve?
Timeline for NoName057(16)
Produced 48 per cent of ideology-driven activity
Cybersecurity: Threats and Defences: ENISA finds most NoName057(16) claims failBackground
NoName057(16) is a pro-Russian hacktivist group that runs distributed denial-of-service (DDoS) campaigns, which knock websites offline with floods of junk traffic, against European targets. ENISA found the group's claims generally aligned with the targets set through DDoSia, its attack platform.
ENISA's annual threat report, published on 22 September 2026 and covering 8,257 incidents from 2025, attributed 48 per cent of the ideology-driven activity it recorded to the group. Only 23.8 per cent of the claims ENISA assessed were validated by Independent checks on whether the target actually went offline. ENISA suggests some claims served an influence objective, inflating perceptions of operational impact.
Public administration was the most targeted sector in ENISA's 2025 data, at 31.8 per cent of events, and 81.8 per cent of those were ideology-driven DDoS. ENISA's NIS360 study in May 2026 had already found hacktivists aiming mostly at public bodies.