Europol and Eurojust have dismantled a pro-Russian cybercrime network responsible for thousands of cyberattacks targeting Ukraine and its European allies. The crackdown, involving 12 countries, resulted in arrests and the disruption of infrastructure used in attacks on government systems, public transport, and energy sectors across Europe.

In a significant move against state-linked cybercrime, Europol and Eurojust announced the takedown of the hacking group NoName057(16), accused of conducting thousands of distributed denial-of-service (DDoS) attacks on Ukraine and NATO member states. The joint operation, conducted between July 14 and 17, led to two arrests—one in France and another in Spain—and the dismantling of the group’s core infrastructure.

Authorities said seven international arrest warrants were issued, including six for suspects in Russia. Two of those suspects are believed to be key figures directing the group’s activities.

According to Europol, the group targeted critical European infrastructure, including energy suppliers, public transport systems, and government websites. Their attacks disrupted services across Europe, notably during sensitive political events such as the European elections, a Ukraine peace summit in Switzerland, and the NATO summit in the Netherlands.

In Germany alone, NoName057(16) carried out 14 attacks that affected around 230 organizations, ranging from arms manufacturers to public agencies. Attacks were also reported in Sweden, Switzerland, and the Netherlands, with hackers aiming to destabilize and intimidate states supporting Ukraine’s defence against Russia’s invasion.

The hackers specialized in DDoS attacks, which overwhelm online services with traffic until they crash, causing widespread disruption and financial damage.

Authorities said they had succeeded in taking down much of the group’s attack infrastructure, consisting of more than 100 computer systems globally, effectively crippling its capacity to operate.

Europe Steps Up Cyber Defence

The takedown of NoName057(16) highlights growing international cooperation in the face of cyber threats linked to Russia’s war on Ukraine. European agencies continue to treat such attacks as part of a broader hybrid warfare strategy by Moscow, targeting not just Ukraine but its allies across the continent.

The operation reflects the increasing urgency with which European and international law enforcement view cyber threats linked to geopolitical conflicts.