Dosia

NoName057(16) (Threat Actor)

NoName057(16) has been identified as a pro-Russian hacktivist group conducting distributed denial-of-service (DDoS) attacks against websites tied to governments, news agencies, military organizations, suppliers, telecommunications providers, transportation authorities, and financial institutions. The group’s operations have focused on Ukraine and countries supporting Ukraine, with reported targeting that includes Estonia, Lithuania, Norway, and Poland. Reporting links the group to the Dosia/DDoSia malware family and describes an operation that has evolved through publicly documented infrastructure, targeting patterns, and campaign activity. The activity reflects a sustained disruptive effort aimed at public- and private-sector online services in European states aligned with Ukraine, reinforcing the group’s role as a persistent politically motivated DDoS threat.