Q&A Interview
Since March 2022, days after Russia launched its full-scale invasion of Ukraine, a hacktivist group calling itself NoName057(16) has been waging a relentless digital campaign against governments, financial institutions, transportation networks, and critical infrastructure across Europe and beyond. They are not quiet about it.
Operating primarily through Telegram, the group coordinates thousands of volunteers using their custom-built DDoS tool, DDoSia, a crowdsourced attack platform that allows ordinary users to participate in coordinated denial-of-service campaigns against targets the group deems hostile to Russia. Between March 2022 and June 2025, the group is believed to have carried out more than 1,500 DDoS attacks, averaging 50 unique targets per day at peak activity.
Their targets have included government ministries in Denmark, Finland, Lithuania, and the Netherlands; train ticketing systems in Latvia; ports in Belgium; financial institutions across the EU; and most recently, infrastructure in Israel and Taiwan, reflecting a geopolitical reach that extends far beyond the Ukrainian conflict.
In July 2025, international law enforcement struck back. Operation Eastwood, coordinated by Europol and Eurojust across 12 countries, resulted in two arrests, seven international arrest warrants, and the disruption of over 100 servers worldwide. The group responded within hours, dismissing the operation on Telegram and resuming attacks.
Daily Dark Web reached out to NoName057(16) directly. What follows is their unfiltered response, published in full, without editorial alteration. The views expressed are entirely those of the group and do not reflect the positions of Daily Dark Web.
⚠ EDITORIAL NOTE: The statements below are published for informational and journalistic purposes. Daily Dark Web does not endorse, promote, or support the activities, ideology, or targets of NoName057(16) or any threat actor group.
How would you describe the main purpose and mission of your group?
Our mission is to bring justice and protect those who are violated in their rights, and to tell people the truth, which is forbidden in the West.
What motivates your recent actions and choice of targets?
Our attacks always have a reason. If we talk about the latter, Romania has concluded an agreement with the Kiev terrorist regime, and we are attacking Israel because the blood of innocent Iranians is on the hands of its authorities.
How do you decide which organizations or sectors to focus on?
We devote a lot of time to analytics and goal intelligence. The choice falls on those targets whose attack will cause maximum economic and image damage to countries unfriendly to Russia, as well as disrupt supply chains or important processes in production and the economy.
How do you distinguish your group from others working in the same field?
We are unique in that, for the first time on the Darknet, we have created a hacker crowdsourcing system, we have organized attacks in such a way that thousands of real people participate in them, thanks to our DDoSia Project. We have also been the most active pro-Russian hacker group since 2022. We bring together thousands of volunteers and hundreds of other hacker groups and specialists from various industries under our banners, which allows us to carry out complex cyber attacks and extract the data we need, which is useful to our military, for example.
What message are you trying to convey through your actions?
The enemy will be defeated! The victory will be ours. Justice has no name. NoName057(16). That’s if you’re talking about slogans. And if we talk about the meanings: No one will go unpunished for helping Zelensky’s terrorists, we will fight for Russia on the information front to the last. No amount of operations by Europol, the FBI, or anyone else will stop us. It is impossible to kill us, we are not servers or software code, we are an ideology carried and shared by living people. An idea cannot be killed.
How do you respond to allegations that your actions affect civilians or unrelated organizations?
Corrupt European media, cyber analysts bought by the West, and other imbeciles are trying to attribute attacks on medical facilities to us or otherwise discredit us, but this is all a lie and no one believes in their nonsense anymore even in Europe. We are fighting for truth and justice, and people understand this, no matter how much dirt they try to pour on us.
What do you think is the biggest misconception about your group?
The fact that we are led by the KGB, the GRU, Putin, the Kremlin, the Secret World Government, and so on. It’s very funny for us to read this! And it’s also very funny for us to watch how Europol and the FBI have found some Russians and citizens of other countries and are trying to impersonate them as our leaders! Thanks to this cheap nonsense, we feel great and continue our work.
How do you see your operations developing in the near future?
We will attract even more resources to our attacks, both human and technical. We recently opened an anonymous platform on the Tor network for the anonymous collection of sensitive data for unfriendly countries. We are developing our volunteer cells all over the world, including in Europe. We are constantly improving our attack software, automating processes, using neural networks and artificial intelligence.
Are your actions driven more by ideology, strategy, or opportunity?
We are driven by the ideology of justice. Of course we devote a lot of time to strategy and tactics, but our possibilities are, in fact, limitless.
Is there anything that you would like to bring directly to a global audience?
Join our DDoSia Project. Together we will defeat evil.
NoName057(16) remains one of the most operationally active and ideologically consistent hacktivist groups in the current threat landscape. Their answers reveal a group that is confident, organized, and showing no signs of slowing down, despite sustained international law enforcement pressure.
What stands out is the contradiction at the heart of their narrative: a group that claims to be a spontaneous, ideology-driven volunteer movement while simultaneously describing sophisticated target intelligence, coordinated infrastructure, AI-assisted automation, and military-grade data collection. Whether truly independent or state-backed, as multiple intelligence agencies including the US Department of Justice have assessed, the operational output speaks for itself.
In July 2025, Europol and Eurojust coordinated a multinational takedown of NoName057(16) infrastructure spanning 12 countries. Two suspects were arrested, seven international warrants were issued, and over 100 servers were disrupted worldwide. The group resumed operations within hours of the announcement.
For organizations and governments across Europe, the message from this interview is clear: this group views itself as an ideology, not an organization. Ideologies are considerably harder to take offline than servers.
Daily Dark Web will continue monitoring NoName057(16) activity and reporting on developments as they emerge.
Daily Dark WebRead More
R1
T1
