Global Operation Disrupts Pro-Russian Cybercrime Network

A global law enforcement operation disrupted pro-Russian hacker group NoName057(16), resulting in arrests, infrastructure takedowns, and warnings to over 1,000 supporters. The group conducted DDoS attacks against Ukraine and allies.
pro-russian-cybercrime-network-disrupted

International Law Enforcement Targets NoName057(16) Hackers

Between 14-17 July 2025, a coordinated international operation codenamed Eastwood successfully targeted the pro-Russian cybercrime group NoName057(16). Authorities from 12 countries participated in the action, which disrupted over 100 computer systems worldwide and took down major server infrastructure.

Operation Results and Arrests

The operation resulted in 2 arrests (France and Spain), 7 arrest warrants (including 6 issued by Germany), 24 house searches across multiple countries, and 13 individuals questioned. Law enforcement contacted over 1,000 supporters via messaging apps, warning them of legal consequences.

Attack Patterns and Motivations

NoName057(16) primarily launched DDoS attacks against Ukrainian infrastructure and supporting nations, including NATO members. Recent attacks targeted the Ukrainian Peace Summit in Switzerland and NATO meetings in the Netherlands. The group recruited Russian-speaking sympathizers through gamified tactics, offering cryptocurrency rewards and status recognition.

International Coordination

Europol and Eurojust coordinated the operation, with support from ENISA and private cybersecurity firms. Europol hosted over 30 coordination meetings and established a virtual command center during the action days. The operation was conducted under the EU's EMPACT framework targeting organized cyber threats.

Emma Dupont
Emma Dupont

Emma Dupont is a dedicated climate reporter from France, renowned for her sustainability advocacy and impactful environmental journalism that inspires global awareness.

Read full bio →

You Might Also Like