Pro-Russian group hits Danish and Greenlandic targets with DDoS

The pro-Russian hacktivist group NoName057(16) is attacking several targets in Denmark and Greenland with distributed denial-of-service. While it is tempting to link the attacks to the 24 March election, the group itself says the reason is Danish support for purchasing mobile air defence systems for Ukraine. Several targets reportedly stopped responding, but attacks of this kind are usually a temporary nuisance with little practical impact.

What this means for your organisation

Neighbouring countries are a fair indicator of what may come next. The group picks targets in response to political gestures, and Norwegian support for Ukraine makes Norwegian organisations an obvious next address. What separates organisations that handle this well from those that do not is rarely the technology, but whether anyone knows who gets alerted, who speaks to the press, and which services must stay up if something has to be dropped.

Berigo recommends

• Review which of your services are visible from the internet, and which of them actually need to be.
• Test that DDoS protection engages as expected, ideally together with your provider.
• Rehearse the alerting chain: who detects, who decides, who informs customers and media.
• Be careful not to read more into these attacks than is there, and do not let the attention pull resources away from more serious incidents.