Hacktivist group
DDoSia Project
Origin: Russia Status: Active
Confidence: Confirmed
DDoSia (often referenced as the “DDoSia Project” or “DDoSIA”) is an OSINT-described crowdsourced DDoS toolkit and participation model associated with the pro‑Russian hacktivist ecosystem, most prominently NoName057(16). Public analyses describe DDoSia as a client distributed to “volunteers” who join coordinated attack waves against target lists announced via Telegram. The operational value of DDoSia is not stealth but scale and tempo: it lowers the barrier for participation and enables rapid surge attacks against public-facing services during geopolitical flashpoints.
ATT&CK
MITRE ATT&CK
T1498Network Denial of Service
T1583.001Domains
T1585.001Social Media Accounts
Research
Selected OSINT
Global operation targets NoName057(16) pro-Russian cybercrime network (Operation Eastwood)|europol.europa.euAnatomy of DDoSia: NoName057(16)'s DDoS Infrastructure and Targeting (PDF)|assets.recordedfuture.comOperation Eastwood: Measuring the Real Impact on NoName057(16)|imperva.comAA25-343A: Pro-Russia Hacktivists Conduct Opportunistic Attacks Against U.S. and Global Critical Infrastructure|cisa.govHow NoName057(16) Uses DDoSia to Attack NATO Targets|picussecurity.com