In a major international crackdown, law enforcement agencies from multiple countries, including Germany, targeted the pro-Russian hacker group 'NoName057(16)', responsible for numerous cyberattacks.

The operation focused on disrupting the group's activities, which have targeted critical infrastructure during significant events like European elections, the NATO summit, and a speech by Ukraine's president in Switzerland.

Authorities issued six arrest warrants for Russian nationals, with key figures identified as leaders within the organization, which has been operational since early 2022.

NoName057(16) operates without formal leadership but boasts an estimated 4,000 supporters recruited via social media and forums to execute cyberattacks, primarily DDoS operations.

The group has used encrypted platforms like Telegram and GitHub to coordinate, recruit, and train supporters, offering software and incentives such as cryptocurrency payments to encourage participation.

Since the invasion of Ukraine, supporters have been provided with lists of Western targets and tools to carry out attacks, with operations funded through cryptocurrencies.

The group employs gamified tactics, including leaderboards and a publicly available toolkit called 'DDOSIA', to incentivize younger users to participate in cyberattacks.

NoName057(16) developed a botnet of several hundred infected computers and servers to enhance their cyberattack capabilities, with some key members, including a woman known as 'olechochek', facilitating operations.

Law enforcement, including the German Federal Criminal Police (BKA), is actively seeking information on five suspected members and supporters, marking a rare public effort against a hacktivist group.

Authorities have labeled the group as a criminal organization, emphasizing the serious threat posed by their attacks on sectors like transportation, media, healthcare, and government infrastructure.

Despite the recent arrests and seizures, experts warn that the core members in Russia could quickly rebuild their network, as the group continues to threaten new attacks.

The group's decentralized operational model allows individuals to launch attacks using tools like 'DDOSIA', making it difficult to dismantle entirely.