Law enforcement targets a prominent pro-Russian hacking crew
In a significant move against cyber threats, German and international law enforcement agencies have collaborated to dismantle the pro-Russian hacker group "NoName057(16)". The group, responsible for 14 cyber-attack waves in Germany, has been under investigation since November 2023.
The operation, involving 12 countries including the US, was carried out in close cooperation with other nations. As a result, a botnet used by the group to carry out cyberattacks was shut down, with servers worldwide being taken offline. This joint international operation saw 24 raids take place, according to the BKA, with three searches conducted in Germany.
The hacker group, known for supporting Russia in the context of the Russia-Ukraine conflict and exhibiting anti-NATO and anti-US sentiments, has attracted significant attention by recruiting over 4,000 supporters primarily through Telegram and other online platforms.
In Germany, the group has carried out 14 DDoS attacks, affecting around 250 companies and public institutions. These attacks were aimed at gaining media attention and influencing political decisions. Authorities in Germany have informed more than 1,000 unidentified supporters about the legal consequences of their actions via a messenger service.
Germany and Spain have issued arrest warrants for suspected members of the group. Germany has issued six arrest warrants, while Spain has issued one. The suspects include Russian nationals or individuals residing in Russia, with two of them identified as main perpetrators of the group.
The group's activities have been ideologically driven, and they have conducted attacks across Europe, targeting critical infrastructure during significant political events. Similar attacks have been carried out against the infrastructures of other states, such as during the European elections and recently at the NATO summit in the Netherlands.
Federal Interior Minister Alexander Dobrindt announced a "successful strike against a hacker network" that had previously carried out multiple cyber attacks in Germany. The minister praised the joint international effort, stating that the operation ran extremely successfully.
Sources: ntv.de, dpa/AFP.
- The community policy regarding cybersecurity should include provisions for international collaboration in investigating and dismantling pro-Russian hacker groups like NoName057(16), as demonstrated by the recent operation involving 12 countries.
- The joint operation against NoName057(16), which resulted in the shutdown of a botnet used for cyberattacks, highlights the importance of research and development in technology, particularly in cybersecurity, to protect critical infrastructure from similar threats.
- The pro-Russian hacker group NoName057(16) has used their activities, which include DDoS attacks and targeting critical infrastructure during war-and-conflicts and political events, as a means of influencing general-news, politics, crime-and-justice, and creating chaos in the affected nations.
