Operation "Eastwood": BKA takes action against hacker group "NoName057(16)"

German and international law enforcement agencies have taken joint action against the hacker group "NoName057(16)." According to the Federal Criminal Police Office (BKA), a botnet consisting of servers distributed worldwide was shut down. The botnet was used for targeted digital overload attacks on websites (DDoS).

The BKA describes NoName057(16) as an "ideologically motivated hacktivist collective" that carries out cyberattacks in support of Russia. The group's actions are said to be a response to political events.

14 waves of attacks

Since the start of the investigation in November 2023, Germany has been the target of a total of 14 waves of attacks by the group, according to the BKA. The actions were aimed at causing lasting disruption to the overall social and political structure of the Federal Republic. The group also had targets in other countries.

Some of the attacks lasted several days and affected a total of around 250 companies and institutions. Targets in Germany included critical infrastructure companies (including defense contractors, electricity suppliers, and transport companies), public institutions, and government agencies. The attacks on websites of various federal states in the spring of 2023 are also attributed to the group.

Since the start of Russia's war of aggression in Ukraine, the group has attracted public attention via messenger services and recruited supporters. According to law enforcement agencies, the network of supporters comprises more than 4,000 users.

"Don't take them seriously"

The group distributed tasks to its supporters via a channel on Telegram. Investigators also took over the bot used for this purpose. The authorities used it to inform the group's supporters that their actions were punishable under German law. The group called on them not to take this seriously.

According to the BKA and the Frankfurt Public Prosecutor's Office, authorities from the US, the Netherlands, Switzerland, Sweden, France, Spain, and Italy were also involved in the international operation, codenamed "Eastwood."

According to the information provided, a total of three properties believed to be linked to suspected supporters of the group were searched in Germany. Two of these were in Bavaria and one in Berlin. According to the BKA, 24 searches were carried out internationally. The evidence seized is currently being evaluated.

In Germany, six arrest warrants were issued against Russian citizens or suspects residing in Russia. Two of them are believed to be the main leaders of the NoName057(16) group. According to the BKA, the Spanish authorities have also obtained an arrest warrant. All suspects are being sought internationally.

The police operation is unlikely to hinder the group's activities in the long term. The suspects are believed to all live in Russia. New servers are easy to rent, and the infrastructure can be quickly replaced.

(vbr)