NoName057(16)

NoName057(16) is a pro‑Russian hacker collective that primarily conducts distributed denial‑of‑service operations against online targets perceived as opposing Russian interests. The group advertises its activities through a Telegram channel where it claims responsibility for attacks and references its proprietary DDOSIA toolkit as the means of generating disruptive traffic. Their campaigns focus on rendering websites and online services inaccessible rather than exfiltrating data or causing permanent damage to infrastructure. Targets have included government ministries, election‑related portals, financial institutions, transport authorities, utility providers and media outlets in countries such as Italy and Romania. The group frames its actions as retaliation for perceived anti‑Russian policies, particularly support for Ukraine, and justifies them in public statements posted on its messaging platform.

The collective’s operational footprint is evident in a series of documented incidents spanning from 2022 to 2025, during which it repeatedly struck Italian entities ranging from the Foreign Ministry and major banks to airports and public transport systems. In addition to Italy, NoName057(16) has launched DDoS campaigns against Romanian government and election‑related sites, demonstrating a transnational pattern aligned with its geopolitical narrative. Distinguishing characteristics of the group include its reliance on application‑layer techniques such as Slow HTTP and volumetric floods, its public attribution via Telegram, and its consistent emphasis on symbolic disruption rather than destructive outcomes. No explicit information regarding organisational size, hierarchical structure, ownership or parent‑subsidiary relationships is provided in the source material, so those aspects remain unspecified. The profile reflects only the facts presented in the supplied overview, without extrapolation or invention.