Lyce · Hybrid Watch

hw_4743cd6e0818fa4b

Series of DDoS attacks claimed against Canadian organisations.

On Sunday 1 December 2024 the NoName057(16) group publicly announced that it had executed 12 separate attacks against Canadian organisations across telecoms, transportation, government and finance. In the week preceding that date the group said it had completed “more than 40” assaults in Canada, all linking their motive to Canada’s support of Ukraine in Moscow’s war. The tactics emphasised high-volume request traffic aimed at backend services (hundreds of thousands of requests per second), exploiting infrastructure exposure rather than deploying destructive malware. Though the efficient attribution to the Russian state remains indirect (via the hacktivist group), the pattern matches Russian-aligned hybrid operations: cyber harassment, infrastructure pressure, cost-imposition. The Canadian government had already flagged Russian cyber and influence efforts as part of its national threat assessment.

Occurrence
2024-12-01
Publication
2024-11-30T23:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
CA
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2024-11-30T23:00:00Z

    On Sunday 1 December 2024 the NoName057(16) group publicly announced that it had executed 12 separate attacks against Canadian organisations across telecoms, transportation, government and finance. In the week preceding that date the group said it had completed “more than 40” assaults in Canada, all linking their motive to Canada’s support of Ukraine in Moscow’s war. The tactics emphasised high-volume request traffic aimed at backend services (hundreds of thousands of requests per second), exploiting infrastructure exposure rather than deploying destructive malware. Though the efficient attribution to the Russian state remains indirect (via the hacktivist group), the pattern matches Russian-aligned hybrid operations: cyber harassment, infrastructure pressure, cost-imposition. The Canadian government had already flagged Russian cyber and influence efforts as part of its national threat assessment.