Europol Dismantles Infrastructure of Pro-Russian Hacktivist Group NoName057(16)

On July 16, 2025, Europol announced the success of “Eastwood,” a coordinated international police operation targeting NoName057(16), a pro-Russian hacktivist network known for large-scale DDoS attacks. Active since the early days of Russia’s invasion of Ukraine in 2022, the group has relied on a network of more than 4,000 sympathizers and multiple botnet infrastructures. It has claimed responsibility for numerous high-profile DDoS attacks against Ukraine and its European allies.

Operation Eastwood was carried out in cooperation with Eurojust and involved law enforcement and judicial authorities from Germany, Spain, the United States, France, Finland, Italy, Lithuania, the Netherlands, Poland, the Czech Republic, Sweden, and Switzerland. Authorities seized more than 100 servers, effectively dismantling “a large part of the group’s core infrastructure.”

Seven international arrest warrants were issued against key members of NoName057(16). Investigators also reached out to more than 1,100 sympathizers — mostly Russian speakers — through the encrypted messaging platforms used by the group, warning them of potential criminal consequences for their involvement.