DDoS campaign aimed at UK targets after arms support to Ukraine

The Russia-aligned group NoName057 has since yesterday concentrated its DDoS attacks on targets in the United Kingdom. The group states that the reason is British support for Ukraine, citing deliveries of 3,500 drones, 18,000 artillery rounds and three million rounds of small arms ammunition over the past month.

What this means for your organisation

Campaigns from groups of this kind track political events and move between countries as the news cycle shifts. Norway has been the target of similar waves before, and a new Norwegian arms package or political decision could move the attention here. The practical effect is usually limited and short-lived, but the attacks hit public-facing websites, which is exactly where media and customers look. The real cost often lies in rushed, unclear communication rather than in the downtime.

Berigo recommends

• Confirm that DDoS protection in front of public-facing services is actually active, not merely purchased.
• Agree in advance with your provider who does what when traffic spikes, and who can trigger measures outside office hours.
• Keep prepared wording for the website and customer service so communication is not drafted mid-incident.
• Separate public-facing services from business-critical ones so an attack on the website does not take operations with it.