Hackers aligning with pro-Russian sentiments have their server halted.
In a significant move to combat cybercrime, 12 countries, including Europol, Eurojust, and the United States, collaborated on a four-day operation dubbed Operation Eastwood. The aim was to dismantle the pro-Russian hacker group NoName057(16), notorious for conducting politically motivated cyberattacks across Europe.
The operation, which took place between July 14 and 17, 2025, saw the takedown of over 100 servers worldwide that supported NoName057(16)'s cyberattacks. This disruption of infrastructure marked a major blow to the group's operational capabilities.
The group, described as an ideologically driven hacktivist collective, has been responsible for a series of cyberattacks on critical infrastructure in Europe, targeting power suppliers, public transport, arms factories, government agencies, and financial institutions. These attacks were often timed to coincide with major political events, such as the European elections, the Ukrainian president’s speech to the Swiss parliament, and the NATO summit in the Netherlands.
NoName057(16) gained public attention via messengers and recruited supporters since the beginning of the Russian invasion of Ukraine. The group reportedly mobilised about 4,000 supporters through Telegram and other messaging platforms, using gamification techniques and cryptocurrency rewards to keep members recruited and engaged.
Seven international arrest warrants have been issued targeting suspects mostly residing in the Russian Federation, including two alleged ringleaders. So far, at least two arrests have been made, along with 24 house searches across multiple jurisdictions.
The operation against NoName057(16) was not limited to cybersecurity measures. Authorities also conducted raids in Bavaria and Berlin, with the BKA and the General Public Prosecutor's Office in Frankfurt am Main taking the lead in Germany.
The seized evidence is currently being evaluated, and the operation continues as authorities trace further members through digital footprints such as Telegram accounts and cryptocurrency transactions. Benjamin Krause, head of the Central Office for Combating Cybercrime at the General Public Prosecutor's Office in Frankfurt, stated that the individuals, members, and supporters of this group are being pursued as what they are: a criminal organisation.
This coordinated law enforcement action represents a significant blow to the group, dismantling much of their operational infrastructure and placing key suspects under international scrutiny. The operation serves as a testament to the power of international cooperation in combating cybercrime and maintaining the security of critical infrastructure in Europe.
- The collaborative operation, involving 12 countries and various law enforcement agencies, targeted the politically motivated cyberattacks of NoName057(16), a pro-Russian hacker group, by focusing on dismantling their global servers and infrastructure.
- The disruption of NoName057(16)'s infrastructure and the issuance of international arrest warrants for key suspects, primarily residing in the Russian Federation, indicate a bold approach in the realm of cybersecurity and politics to combat such cybercrimes.
- The ongoing investigation, involving the evaluation of seized evidence and tracing members through digital footprints like Telegram accounts and cryptocurrency transactions, underscores the need for continued collaboration in technology and general-news discourse regarding crime-and-justice issues.
