Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations
May 01, 2025 
Pro-Russia hacktivist group NoName057(16) is targeting Dutch organizations with large-scale DDoS attacks, the country’s National Cyber Security Center (NCSC) warns.
This week, several Dutch and European organizations faced large-scale DDoS attacks launched by Pro-Russia hacktivists, including the NoName057(16) group.
Threat actors target organizations across public and private sectors. Russian hacktivist group NoName057(16) claimed some of the attacks, citing pro-Russian ideological motives. Dutch government experts explained that identifying attackers and their exact intent remains difficult.
“This week, several Dutch organizations are the target of large-scale DDoS attacks. The DDoS attacks are aimed at both Dutch and other European organizations.” reads the statement published by the country’s National Cyber Security Center (NCSC). “Within the Netherlands, attacks are carried out on both public and private parties.“
The NCSC investigates the attacks, monitors hacktivist groups like NoName057(16), and coordinates with partners to alert and support potential targets.
This week, Pro-Russia hacktivist group NoName057(16) called to action against Dutch organizations and claimed multiple successful attacks:
NoName057(16) claims recent DDoS attacks on Dutch targets are revenge for military aid to Ukraine, the group added that the attacks are ongoing.
“The Netherlands sent €6 billion in military aid to Ukraine in February and will allocate another €3.5 billion in 2026. To do this, the authorities had to cut the education and research budget by €1.2 billion.” reads the message published by the hacktivists on their Telegram channel.
A cyberattack on Monday disrupted at least 19 municipal and provincial websites in the Netherlands, affecting regions like Groningen and cities like Breda.
The group NoName57 has been active since March 2022 and has targeted government and critical infrastructure organizations worldwide.
NoName057(16) uses multiple tools to carry out their attacks. In September 2022, Avast researchers observed the group using the Bobik botnet to launch DDoS attacks.
They operate in waves, escalating attacks during geopolitical tensions, such as increased military or diplomatic support for Ukraine by other nations.
In January, Pro-Russia hackers Noname057(16) targeted Italian ministries, institutions, critical infrastructure’s websites and private organizations over the weekend. The new wave of attacks coincides with the visit of Ukrainian President Volodymyr Zelensky to Italy.
Noname057(16) hackers also hit Italian banks, including Intesa, Monte Paschi di Siena, and Italian ports of the cities of Taranto and Trieste. The Pro-Russia hacktivists also targeted private organizations, including Vulcanair and Olidata.
At the end of December, Pro-Russia group NoName057 targeted several Italian web sites, including Malpensa and Linate airports, in a new DDoS campaign amid rising geopolitical tensions.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, DDoS)