Anatomy of DDoSia: NoName057(16)'s DDoS Infrastructure and Targeting
By Insikt Group®
Excerpt
NoName057(16) uses a resilient,
multi-tiered infrastructure featuring
rapidly rotated Tier 1 command-and-
control (C2) servers and access-
controlled Tier 2 servers to enhance
operational security.
NoName057(16) maintains a high
operational tempo, averaging 50
unique targets daily, with activity
patterns strongly indicating operations
from within a Russian time zone.
CYBER
THREAT
ANALYSIS
CYBER T…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Recorded Future on go.recordedfuture.com.
Mentioned in the excerpt
More from Recorded Future21
- BlueDelta Targets Defense and Diplomacy with HOOKEDGERecorded Future · Added 23 Sep
- Latin America and the Caribbean Cybercrime LandscapeRecorded Future · Added 4 Jun
- GrayCharlie Hijacks Law Firm Sites in Suspected Supply-Chain AttackRecorded Future · Added 17 Apr
- DRAT V2: Updated DRAT Emerges in TAG-140’s ArsenalRecorded Future · Added 17 Aug 2025
On the same topics
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware FamilySilent Push · Published 4 Feb
- The DGA of Sisronbin.re · Added 25 Oct
- JDY Botnet: How IoT and SOHO Devices Are ExploitedLumen Black Lotus Labs · Added 10 Oct
