Hackers Collective Shutdown - Forced Termination of Server Operations - Actions Taken against Cybercriminal Collective - Termination of Online Platform
In a significant move against cybercrime, an international law enforcement operation named Operation Eastwood was carried out between July 14 and 17, 2025. Led by Europol and Eurojust, the operation involved authorities from numerous countries, including Germany, France, Spain, the United States, and many European nations. The primary target was the pro-Russian hacker group NoName057(16), which has been causing disruption through digital denial-of-service attacks on websites.
The operation resulted in several key actions and outcomes. Over 100 servers and systems that made up the group's global attack infrastructure were taken down, significantly degrading their operational capabilities. Two arrests were made—one in France and another in Spain—and seven European arrest warrants were issued, six of which targeted individuals believed to be residing in Russia, including two alleged ringleaders of the group. Approximately 1,100 participants and 17 administrators of the group's Telegram channels were warned about their criminal liability for aiding DDoS attacks.
The investigation, which began in November 2023, revealed that NoName057(16) launched 14 waves of DDoS attacks, primarily targeting Germany but also affecting other countries. Critical infrastructure, government agencies, public institutions, and numerous companies were among the targets, causing prolonged disruptions.
Germany's Federal Criminal Police Office (BKA) and the General Prosecutor's Office in Frankfurt am Main took the lead in the operation. Benjamin Krause, head of the Central Office for Combating Cybercrime at the General Prosecutor's Office in Frankfurt, stated that those responsible, members, and supporters of the group are being pursued as a criminal organization.
Federal Minister of the Interior Alexander Dobrindt (CSU) commented on the measures, stating that they have successfully struck a blow against a hacker network that has repeatedly carried out cyberattacks in Germany. However, authorities acknowledge that since core members are located in Russia, the group is expected to attempt rebuilding its infrastructure and continuing attacks.
Internationally, the BKA reported that the hacker group was also responsible for multiple DDoS attacks during the NATO summit in June in The Hague. According to Dutch authorities, these attacks aimed to gain media attention and influence political and societal decisions.
According to the assessment of law enforcement agencies, the support network for NoName057(16) comprises more than 4,000 users. The group has gained public attention via messengers and recruited thousands of supporters since the beginning of the Russian invasion of Ukraine. The main goal of the attacks on German targets was to gain media attention and influence political and/or societal decisions in Germany.
The operation involved coordinated actions and judicial proceedings from law enforcement across Czechia, Finland, Italy, Lithuania, Poland, Sweden, Switzerland, the Netherlands, and the United States, supported by cybersecurity organizations such as ENISA, ShadowServer, and abuse.ch. The investigation remains active, with authorities closely monitoring the group's activities while pursuing suspects abroad.
Approximately 250 companies and institutions were affected by the attacks, including critical infrastructure companies and public institutions. Despite this significant blow, authorities anticipate that the group will attempt to rebuild its infrastructure and continue attacks, given that core members are located in Russia.
Sources: [1] https://www.europol.europa.eu/newsroom/news/operation-eastwood-significant-blow-against-pro-russian-hacker-group-no-name05716 [2] https://www.bundeskriminalamt.de/EN/Presse/Pressemitteilungen/2025/2025-07-18-operation-eastwood.html [3] https://www.spiegel.de/politik/deutschland/hacker-gruppe-no-name05716-angriffe-auf-deutschland-verdächtige-verhaftet-a-235302784.html [4] https://www.heise.de/newsticker/meldung/Operation-Eastwood-Europol-kontrolliert-den-pro-russischen-Hacker-Clan-NoName05716-4554719.html
- The cooperation policy between EC countries, specifically focused on cybersecurity, played a crucial role in Operation Eastwood, as authorities from numerous countries worked together to take down the pro-Russian hacker group NoName057(16).
- The investigation into NoName057(16) underscores the importance of technology in politics and general-news, as the groupused digital denial-of-service attacks as a tool for influencing political and societal decisions, not just in Germany but also during the NATO summit in The Hague.
- The crime-and-justice sector is also closely tied to technology, as evidenced by the international law enforcement operation, Operation Eastwood, which used technology to dismantle a significant portion of the hacker group's attack infrastructure and make several arrests.
