Disrupted Service: Over 100 Servers Involved in DDoSing Pro-Ukraine Websites Discontinued During Operation Eastwood
## Five Suspected Members of Pro-Russian Hacktivist Group NoName057(16) Listed on EU Most Wanted Website
A significant international law enforcement operation, codenamed Eastwood, has led to the listing of five suspected members of the pro-Russian hacktivist group NoName057(16) on the EU’s Most Wanted website.
The individuals, who are wanted by the EU, include: Andrej Stanislavovich Avrosimov, Mihail Evgeyevich Burlakov (also known as darkklogo), Olga Evstratova (also known as olechochek), Maxim Lupin, and Andrey Muravyov (also known as DaZBastaDraw).
These suspects are believed to have supported or directly participated in NoName057(16)’s activities, which are primarily associated with distributed denial-of-service (DDoS) attacks against Ukrainian and NATO-aligned targets.
NoName057(16) is a hacktivist network made up of Russian-speaking sympathizers that emerged following the invasion of Ukraine. The group has been known to carry out DDoS attacks, although these are typically of a nuisance level and have been mitigated without substantial interruptions.
The operation involved 19 countries across Europe and North America, with law enforcement authorities from 12 countries, cybersecurity agencies from 8 countries, non-profits ShadowServer and abuse.ch, and judicial authorities participating.
The group is reported to have built a botnet with several hundred servers to increase the DDoS attack load. In 2023 and 2024, NoName057(16) attacked Swedish authorities and bank websites, and German officials documented 14 separate waves of attacks targeting more than 250 companies and institutions. The group also DDoSed the Peace Summit for Ukraine at Bürgenstock.
The operation has disrupted much of the group’s infrastructure, with over 100 servers belonging to NoName057(16) being shut down. Two Russian nationals were arrested in France and Spain as part of the operation, and seven arrest warrants were issued. In total, 13 individuals across Europe were questioned about their involvement in the NoName057(16) gang.
Two suspects are accused of being the main instigators of NoName057(16)'s DDoS attacks and are listed as internationally wanted. The legal processes and investigations are ongoing, and authorities believe some core members remain at large. The Swiss government websites were targeted during a video address from Ukrainian President Volodymyr Zelenskyy to the joint parliament in June 2023, and Dutch authorities confirmed that an attack linked to NoName057(16) was carried out during the latest NATO summit held in the Netherlands last month.
- The operation, known as Eastwood, involved 19 countries across Europe and North America, collaborating in the realm of technology and cybersecurity to dismantle the NoName057(16) hacktivist group.
- The listing on the EU’s Most Wanted website now includes five individuals associated with the group, some of whom have aliases in the general-news and crime-and-justice sectors, such as Mihail Evgeyevich Burlakov (darkklogo) and Andrey Muravyov (DaZBastaDraw).
- The activities of NoName057(16) have primarily focused on distributed denial-of-service (DDoS) attacks against Ukrainian and NATO-aligned targets, adding tension to political relations and the security of affected entities.
- As part of the Eastwood operation, authorities have accused two suspects of being the main instigators of NoName057(16)'s DDoS attacks, emphasizing the severe implications of such cybercrime on national and international security.
