Pro-Russia cybercrime network targeted by European law enforcement
LONDON -- Law enforcement officials in Europe said they had coordinated the dismantling of an international pro-Russian cybercrime network, arresting two members, issuing warrants for others in Russia and disrupting the group's main infrastructure.
The network, known as NoName057(16), was alleged to have targeted Ukraine and countries that supported Kyiv in its fight against the Russian invasion, Europol said in a statement Wednesday. The group was alleged to have recruited volunteers via "pro-Russian channels, forums, and even niche chat groups on social media and messaging apps."
"Individuals acting for NoName057(16) are mainly Russian-speaking sympathisers who use automated tools to carry out distributed denial-of-service (DDoS) attacks," Europol said in a statement.
Two people were arrested, one in France and one in Spain, officials said of the 3-day operation. Seven other arrest warrants were issued, including six by Germany for alleged hackers living in Russia, Europol said.
"The group, which professed support for the Russian Federation since the start of the war of aggression against Ukraine, executed multiple DDoS attacks during high-level political events in Europe," the European Union Agency for Criminal Justice Cooperation, or Eurojust, said in a statement posted to social media.
The FBI in the United States was among the law enforcement agencies who took action against the group, Europol said. Europol and Eurojust, the European Union's top law-enforcement agencies, coordinated the operation, which they called "Eastwood." They were joined by authorities from Czechia, France, Finland, Germany, Italy, Lithuania, Poland, Spain, Sweden, Switzerland and the Netherlands.
The hacking group was estimated to have mobilized some 4,000 users to support their operations, Eurojust said. Europol and other law enforcement agencies sent some 1,000 alleged supporters messages notifying them of "their legal liability," Europol said.
Investigators said they disrupted more than 100 servers used by the group, along with a "major part" of the group's main infrastructure. Law enforcement officers searched two dozen houses throughout Europe and questioned people in Germany, France, Italy, Poland and Spain, according to Europol.
The pro-Russian group was accused of a series of hacks, including attacking banks and government offices in Sweden, along with perpetrating waves of cyber attacks in Germany and elsewhere. The attacks in Germany targeted some 230 organizations and businesses, including “arms factories, power suppliers and government organizations,” according to Eurojust.
"In Switzerland, multiple attacks were also carried out in June 2023, during a Ukrainian video-message addressed to the Joint Parliament, and in June 2024, during the Peace Summit for Ukraine at Bürgenstock," Europol said.
The group was most recently alleged in June to have attacked the NATO summit in the Netherlands.
