Global Operation Disrupts Pro-Russian Cybercrime Network

International Law Enforcement Targets NoName057(16) Hackers

Between 14-17 July 2025, a coordinated international operation codenamed Eastwood successfully targeted the pro-Russian cybercrime group NoName057(16). Authorities from 12 countries participated in the action, which disrupted over 100 computer systems worldwide and took down major server infrastructure.

Operation Results and Arrests

The operation resulted in 2 arrests (France and Spain), 7 arrest warrants (including 6 issued by Germany), 24 house searches across multiple countries, and 13 individuals questioned. Law enforcement contacted over 1,000 supporters via messaging apps, warning them of legal consequences.

Attack Patterns and Motivations

NoName057(16) primarily launched DDoS attacks against Ukrainian infrastructure and supporting nations, including NATO members. Recent attacks targeted the Ukrainian Peace Summit in Switzerland and NATO meetings in the Netherlands. The group recruited Russian-speaking sympathizers through gamified tactics, offering cryptocurrency rewards and status recognition.

International Coordination

Europol and Eurojust coordinated the operation, with support from ENISA and private cybersecurity firms. Europol hosted over 30 coordination meetings and established a virtual command center during the action days. The operation was conducted under the EU's EMPACT framework targeting organized cyber threats.