Cyber Incident Victim: MOTOR JIKOV Group
Date:
Jan 2023
Location:
Czechia
Summary
A Czech automotive parts manufacturer experienced a distributed denial-of-service (DDoS) attack claimed by the pro-Russian hacker group NoName057(16), disrupting its online operations. The group targeted the organization's website, publicly sharing a link to verify the takedown while framing the attack as retaliation against perceived anti-Russian actions, specifically referencing monument removals. The attackers promoted their DDoS recruitment efforts and affiliated channels during the incident, emphasizing political motivations aligned with Russian interests.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 16, 2023, the pro-Russian hacktivist group NoName057(16) publicly claimed responsibility for a distributed denial-of-service (DDoS) attack targeting the website of MOTOR JIKOV Strojírenská, a Czech automotive manufacturing company based in South Bohemia. The group announced the attack via a Telegram post at 07:56 UTC, accompanied by a Check-Host network monitoring link purportedly showing the website's inaccessibility. Attackers cited retaliation against Czech authorities for removing Soviet-era war memorials as their primary motivation, framing the operation as part of an ongoing campaign against entities perceived as supporting anti-Russian policies. The post specifically referenced the company's specialization in producing components for passenger vehicles, commercial trucks, and material handling equipment, indicating deliberate targeting of industrial infrastructure. NoName057(16) utilized the incident to promote their recruitment efforts, urging followers to join their DDoS project and subscribe to backup communication channels while repeating the slogan "Victory is ours" in Russian.
The cyberattack resulted in confirmed disruption to MOTOR JIKOV Strojírenská's public-facing online services, with the Check-Host report linked in the announcement serving as technical evidence of website downtime. NoName057(16) did not disclose attack duration, data compromise claims, or secondary impacts beyond the initial service disruption. The company's operational technology systems and manufacturing infrastructure were not mentioned as affected in the available source material. MOTOR JIKOV Strojírenská's response to the incident remains undocumented in the primary source, with no public statements or recovery timelines referenced in the attacker's announcement. The hacktivist group concluded their message by reinforcing ideological alignment with Russian interests and directing followers to their primary Telegram channel for future operations.