NoName057(16)

About

Rewards for Justice (RFJ) is offering a reward of up to $10 million for information leading to the identification or location of any person who, while acting at the direction or under the control of a foreign government, participates in malicious cyber activities against U.S. critical infrastructure in violation of the Computer Fraud and Abuse Act.

NoName057(16) is a Russia-linked hacktivist group known for its malicious cyber activity targeting critical infrastructure in the United States as well as in European Union and NATO countries in support of Russian objectives.

Between March 2022 and June 2025, the group is believed to have conducted more than 1,500 distributed denial of service (DDoS) attacks on websites belonging to governments, news agencies, armies, telecommunications companies, transportation authorities, and financial institutions in Ukraine and neighboring countries — including Estonia, Finland, Lithuania, Norway, Poland, and Sweden—that support Ukraine in its war with Russia. NoName057(16) has claimed cyber attacks on Dutch infrastructure leading up to and during the June 2025 NATO Summit, hosted at The Hague, Netherlands.

For its DDoS operations, NoName057(16) and its associated cyber actors use a powerful proprietary digital attack tool kit called DDoSia. Individuals from all over the world who join NoName057(16)’s Telegram channels can download DDoSia and participate in attacks on victims selected by NoName057(16)’s administrators. Before a user can download DDoSia, s/he must affirm that s/he has read a document entitled “manifesto,” which describes the pro-Russian geopolitical motivations for NoName057(16)’s campaign of cyber attacks.

Members of NoName057(16) are closely aligned to the organization known as the Center for the Study and Network Monitoring of the Youth Environment (CISM) (Центр изучения и сетевого мониторинга молодёжной среды — Цисм), an information technology organization established by the President of Russia in October 2018.CISM was actively involved in helping to coordinate DDoS attacks across Europe according to European law enforcement agencies.

Associated Malicious Cyber Application:

DDoSia

Associated Malicious Cyber Channels:

NoName057(16); NoName057(16) Eng version chat; DDoSia Project