Lyce · Hybrid Watch

hw_164957719bdb356f

Pro-Russian hacker collective hits Belgian government portals.

A pro-Russian hacker collective (allegedly the group NoName057(16)) targeted multiple Belgian governmental websites with DDoS attacks, including the federal government portal MyGov.be and the Walloon Parliament site. The hackers claimed the attack was motivated by Belgium’s decision to provide a €1 billion aid package to Ukraine. The digital disruption caused temporary inaccessibility of citizen-facing government services and heightened concerns about Belgium’s cyber-resilience. The incident is centred on Belgium’s capital region and national infrastructure, showing that even countries outside the immediate Russian border region can be subject to hybrid operations. The dynamics illustrate how Russia-aligned or tolerated actors use non-kinetic methods (digital denial-of‐service) to impose operational cost and signal capabilities. Although the link to Russia is indirect (through pro-Russian hacktivists) rather than a direct Moscow-authorised kinetic act, the pattern aligns with broader hybrid-warfare logic.

Occurrence
2025-03-24
Publication
2025-03-23T23:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
BE
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2025-03-23T23:00:00Z

    A pro-Russian hacker collective (allegedly the group NoName057(16)) targeted multiple Belgian governmental websites with DDoS attacks, including the federal government portal MyGov.be and the Walloon Parliament site. The hackers claimed the attack was motivated by Belgium’s decision to provide a €1 billion aid package to Ukraine. The digital disruption caused temporary inaccessibility of citizen-facing government services and heightened concerns about Belgium’s cyber-resilience. The incident is centred on Belgium’s capital region and national infrastructure, showing that even countries outside the immediate Russian border region can be subject to hybrid operations. The dynamics illustrate how Russia-aligned or tolerated actors use non-kinetic methods (digital denial-of‐service) to impose operational cost and signal capabilities. Although the link to Russia is indirect (through pro-Russian hacktivists) rather than a direct Moscow-authorised kinetic act, the pattern aligns with broader hybrid-warfare logic.