Widely attributedUnknownNoName057(16)
Pro-Russian hacktivist group conducting DDoS attacks against Western governments, media, and critical infrastructure in support of Russian military operations in Ukraine.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 Low3.1
Moderate signal strength
Mentions5
Sources2
High conf.3
Last seenMay 2026
First observed
—
Last active
—
Origin
Russia
Aliases
3
Techniques
0
Campaigns
0
Russia
TargetsGovernmentMediaCritical Infrastructure
RegionsEuropeNorth America
Attribution signals
5 mentions · 2 sources#1claimedhigh
Unspecified
security-affairs
May 2026
"NoName057(16) claimed the attacks directly."
#2launchedhigh
Geopolitical
security-affairs
May 2026
"NoName057(16) and OverFlame launched attack campaigns against Austrian government websites, airports, financial institutions, and the Vienna Stock Exchange, timed to the country's national elections"
#3hithigh
Geopolitical
security-affairs
May 2026
"In May 2026, the same group hit Romanian government websites during the presidential election rerun, taking down the Ministry of Foreign Affairs, the Constitutional Court, and candidate websites on election day itself."
#4moderate
Infrastructure
security-affairs
May 2026
#5unspecified
Infrastructure
therecord
May 2026
Hedge terms observed
claimedhitlaunched