Volunteers launching DDoS attacks rewarded by Cryptocurrency, mostly Bitcoins

Illustration of DDOS attack on server with cybersecurity

NoName057(16), also known as NoName05716 or 05716nnm, has once again made headlines for its growing activity in the world of cyberattacks. This notorious hacker group, which has been making waves since its emergence in 2022, has now intensified its focus on NATO member states and various European organizations. Specifically, the group has been launching Distributed Denial of Service (DDoS) attacks—an increasingly disruptive tactic in the cybersecurity landscape.

DDoS attacks work by overwhelming a target’s servers, networks, or websites with an excessive amount of traffic, causing disruptions or total service outages. These attacks can be paralyzing for businesses and governments alike, especially when they affect critical infrastructure. The latest shift in NoName05716’s approach involves recruiting new volunteers to bolster their operations, offering them access to a botnet— a network of compromised computers or devices used to launch large-scale cyberattacks. In exchange, these volunteers are being rewarded with cryptocurrency, particularly Bitcoin, as it has the potential to exceed its value above $100,000 by the end of the year.

The group’s links to Russia are undeniable. NoName05716 is believed to be supported by Russia’s Centre for the Study and Network Monitoring of the Youth Environment (CISM), a government-backed entity.

Since its inception in March 2022, the group has become a key player in a broader strategy of cyber warfare that aligns with Russia’s geopolitical interests. More recently, NoName05716 has been tasked with carrying out these cyberattacks as part of the DDoSIA Project, a program aimed at targeting Western entities. This project ties into the broader objectives of the Russian government under Vladimir Putin, particularly in the context of heightened political tensions and global conflicts.

By targeting NATO nations and European organizations, NoName05716 is believed to be carrying out a strategic campaign in line with Russia’s broader ambitions to undermine the stability of Western alliances and institutions. The DDoSIA Project represents a form of cyber-warfare that operates below the threshold of traditional military conflict but still seeks to achieve political goals. While DDoS attacks may seem less destructive compared to other types of cyber warfare, their ability to disrupt critical services—like government operations, financial markets, or essential infrastructure—makes them a potent tool in modern geopolitical struggles.

What makes NoName05716 particularly concerning is the way in which it recruits volunteers and operates. By offering cryptocurrencies as incentives, the group is tapping into a global pool of cybercriminals and hacktivists, many of whom may be motivated by financial gain or ideological reasons. With access to powerful botnets, these individuals can contribute to the group’s efforts, making it more difficult for authorities to trace or dismantle their operations. Moreover, the use of cryptocurrency as a reward adds a layer of anonymity, making it harder for investigators to track and shut down the group’s operations.

As the year progresses, NoName05716’s continued attacks, backed by Russia, pose an increasing threat to NATO countries and European organizations. With the potential for financial and political disruptions, the group’s activities highlight the growing role of cyberattacks in modern geopolitics. For both individuals and organizations, it’s a stark reminder of the need for robust cybersecurity measures to defend against these evolving threats.

Join our LinkedIn group Information Security Community!

Naveen Goud
Naveen Goud is a writer at Cybersecurity Insiders covering topics such as Mergers & Acquisitions, Startups, Cyber Attacks, Cloud Security and Mobile Security

No posts to display