NoName057(16)

Also known as NoName057, NoName05716, 05716nnm, Nnm05716

NoName057(16) is performing DDoS attacks on websites belonging to governments, news agencies, armies, suppliers, telecommunications companies, transportation authorities, financial institutions, and more in Ukraine and neighboring countries supporting Ukraine, like Ukraine itself, Estonia, Lithuania, Norway, and Poland.

Targets: Financial, Government, Military, Telecommunications, Transportation, Czech Republic, Denmark, Estonia, Lithuania, NATO, Norway, Poland, Ukraine

Recent activity

• 🇫🇷 🔓 FUITE DE DONNÉES NoName057(16) et Z-Pentest, deux groupes de hackers prorusses revendiquent les cyberattaques des frigos 🔗 https:// infonewscyber.fr/in
  mastodon · Nov 4, 2026
• European supermarket freezer attacks: cross-source analysis of 11 reports (Danfoss / Copeland XWEB, two waves, attribution still open)
  reddit · Nov 4, 2026

References

• https://decoded.avast.io/martinchlumecky/bobik/
• https://www.sentinelone.com/labs/noname05716-the-pro-russian-hacktivist-group-targeting-nato/
• https://www.gov.pl/web/special-services/russian-cyberattacks

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.