DDoSia Targets Denmark: A Clear Look at the Threat

Between 4 November and 13 November 2025, Denmark was included in a focused campaign by the pro-Russian hacktivist groups targeting the DDoSia project, which published target lists that contained 136 Danish targets across government services and critical infrastructure. The DDoSia project is described as a tool that leverages distributed denial-of-service attacks to disrupt critical infrastructure and governmental bodies, and it was launched on Telegram in early 2022, managed by NoName057(16).

The dataset cited by SOCRadar shows that around 70% of the top targets were government websites or institutions, with additional emphasis on critical infrastructure such as the rail sector, including DSB and Banedanmark, which were targeted 27 times in total. Attack methods reported include GET floods, SYN floods, POST floods, and other flood types, with most attacks directed at port 443 (HTTPS).

The article notes that while the methods are simple, the scale and targeting of visible public-facing systems could still disrupt daily life and convey a political message.