NoName057(16) is a pro-russian hacktivist collective that has been conducting large-scale DDoS campaigns against government institutions, financial systems, transportation infrastructure, and media organizations across Europe and NATO-aligned countries since 2022. Unlike traditional APT groups, its activities are not focused on espionage or long-term persistence, but rather on disruption and the degradation of digital services.

The report examines the group’s operational model, including centralized coordination through Telegram, the use of the DDoSia platform, and a volunteer-driven approach that enables rapid attack scaling. It also explores the group’s primary targets, geographic focus, and the relationship between its campaigns and geopolitical events.

The material includes MITRE ATT&CK TTP analysis, Lockheed Martin Cyber Kill Chain mapping, indicators of activity, recurring behavioral patterns, and threat assessment. Particular attention is given to how relatively low technical sophistication can be offset by scale, coordination, and rapid resource mobilization.