DDoSia Targets France: Weekly DDoSia Threat Intelligence Analysis

DDoSia Targets France: Weekly DDoSia Threat Intelligence Analysis covers the period December 1 to 8, 2025, during which NoName057(16), a pro-Russian hacktivist group, kept its DDoS campaign active across European and international domains using the DDoSia tool. France stood out as the main focus, recording the highest attack volume with 1,474 incidents, while international .com targets accounted for 1,036 attacks, and Ukraine and Belgium saw medium activity.

Across seven countries or domain zones, a total of 3,654 attacks were made, all targeting port 443, and the pattern was described as a pure HTTP GET flood, with GET requests comprising the entire attack distribution. The analysis highlights a shift toward French government, transport, tourism, energy, and defence-related organisations, including numerous public administration portals and road-safety services.

Defenders are advised to employ managed DDoS protection, harden front-end infrastructure, monitor port 443 for spikes, and prepare incident response runbooks to mitigate similar campaigns in future weeks.