Lyce · Hybrid Watch

hw_cedf8a6443a3d3f1

Massive multi-sector DDoS campaign hits Spain, attributed to the pro-Russian hacktivist group NoName057(16).

View this signal on the map

Radware’s threat advisory reports that starting on 19 July 2023 (just days before the Spanish general election), NoName057(16) launched a two‐week “weeklong campaign” of 85 DDoS attacks across Spain. The targeted sites included the Spanish electoral authority (Junta Electoral Central), national statistics office (INE), public transport ticketing systems, bank portals, telecom/mobile service pages and major newspaper websites — a broad sweep of state, commercial and civic infrastructure. T The dynamics illustrate how the attackers used volume, timing (coinciding with national elections) and multi-domain targeting to impose cost, force allocation of defensive resources and generate uncertainty and disruption rather than seek immediate violent outcomes. Although websites were knocked offline temporarily, no physical infrastructure destruction was reported; yet the broad scope and high-impact nature elevate this incident firmly into the hybrid-warfare domain. Spain’s disclosure of the campaign and linking it to a Russian-linked hacking group underlines how Western European states are increasingly targets of non-kinetic operations tied to the Russian Federation’s strategic posture.

Occurrence
Publication
First observed
Review status
Not assessed
Countries
Spain
Updated

Attribution

Official

Facts

No facts

Sources

  1. Role
    Discovery lead
    Publication

    Radware’s threat advisory reports that starting on 19 July 2023 (just days before the Spanish general election), NoName057(16) launched a two‐week “weeklong campaign” of 85 DDoS attacks across Spain. The targeted sites included the Spanish electoral authority (Junta Electoral Central), national statistics office (INE), public transport ticketing systems, bank portals, telecom/mobile service pages and major newspaper websites — a broad sweep of state, commercial and civic infrastructure. T The dynamics illustrate how the attackers used volume, timing (coinciding with national elections) and multi-domain targeting to impose cost, force allocation of defensive resources and generate uncertainty and disruption rather than seek immediate violent outcomes. Although websites were knocked offline temporarily, no physical infrastructure destruction was reported; yet the broad scope and high-impact nature elevate this incident firmly into the hybrid-warfare domain. Spain’s disclosure of the campaign and linking it to a Russian-linked hacking group underlines how Western European states are increasingly targets of non-kinetic operations tied to the Russian Federation’s strategic posture.