Threat Intelligence Tarot
Vol. II · 91
Russia (pro-Kremlin hacktivist collective)
★★★★★
risk 2/5
✦ The Battering Ram ✦
NoName057(16)
NoName · RU_ANON
NATO member governmentsUkraine supportersBanks and financial institutionsTransportation infrastructure
Active since March 2022 · Pro-Russian propaganda, Political disruption, NATO retaliation
The Battering Ram does not slip through the gate but charges it directly, crowds of volunteers hammering in synchronized waves against the digital walls of NATO's members. Loud, blunt, and politically legible.
Tactics & Techniques
RCN
RDV
INI
EXC
PRS
PRV
EVA
CRD
DSC
LAT
COL
C2
EXF
IMP
Notable Operations
- ◆DDoS attacks on Czech, Polish, Danish parliaments
- ◆Targeting of German federal agencies and Bundestag
- ◆NATO member financial institution disruption
- ◆DDoSia tool distributed to 14,000+ volunteers
Defenses
- ▸DDoS mitigation service or CDN with traffic scrubbing capabilityNIST CSF: PR.PT ↗
- ▸Anycast DNS and load balancing to distribute traffic during attacksNIST CSF: RC.CO ↗
- ▸Rate limiting on public-facing web servicesCIS Control 12 ↗
- ▸ISP-level upstream filtering for volumetric attack trafficNIST CSF: DE.CM ↗
Reversed: Their Weakness
DDoS mitigation services and CDN-based traffic scrubbing neutralize its primary capability. Organizations behind Cloudflare or Akamai protection see minimal impact from even its largest campaigns.
Share this adversary profile
Compare →swipe to browse
Related Adversaries
Data sourced from MITRE ATT&CK. For educational purposes.