Inside NoName057(16)’s DDoSia Campaign: Targets, Tactics, and Evolution

This in-depth whitepaper explores one of the most persistent hacktivist operations of recent years — NoName057(16) and its DDoSia Project. Focused heavily on politically driven targets, the group has executed hundreds of DDoS attacks across Europe and beyond using decentralized tooling and Telegram-based coordination.

Through detailed case analysis, infrastructure mapping, and community monitoring, this report breaks down the group’s methods, regional targeting logic, and the evolution of its volunteer-based DDoS ecosystem. The whitepaper also examines the role of GitHub tools, cryptocurrency incentives, and real-world political narratives fueling the campaign.

Key Highlights:

• Dissects the decentralized structure and automation of the DDoSia Project.

• Tracks targeting trends across NATO, EU, and neighboring nations.

• Includes screenshots and technical artifacts from the group’s Telegram channels and GitHub activity.

• Explains how victim selection aligns with political milestones and geopolitical sentiment.

This whitepaper is essential for defenders monitoring ideologically motivated threat activity, especially within the public sector, critical infrastructure, or international diplomacy sectors.

➡️ Download the full whitepaper to explore how NoName057(16) continues to adapt its tactics and mobilize cyber volunteers at scale.