The pro-Russian hacktivist group NoName057 has recently reactivated a series of attacks aimed at Spanish public entities. Their return occurs after the international operation 'Eastwood', coordinated by Europol and Eurojust, which in mid-July 2025 dismantled part of their infrastructure and caused multiple arrests in Europe, including several in Spain.
The Threat Intelligence division of the manufacturer Check Point has detected a new wave of offensives targeting municipalities, transport agencies, and other public entities. These actions reflect their intention to demonstrate that they still maintain operational capability, supported by allied collectives such as Z-pentest or Mr.Hamza.
Although many of the attacks were of short duration, In cases where defenses were weak, they managed to render systems inoperative for hours. The striking thing is that the group announces each attack in advance on their forums, with 24 hours in advance, and then spreads 'proofs' on their digital propaganda channels. At the same time, it evolves from simple DDoS attacks to intrusions and data exfiltration, raising the level of threat.
Check Point experts warn about the persistence of NoName057 and recommend maintaining constant vigilance. Organizations must strengthen their cybersecurity with multi-level strategies that include advanced protection against DDoS, intrusion detection systems (IDS) and continuous staff training to mitigate potential impacts.
Fountain: Cybersecurity News