Pro-Russian Hacktivists Target Government, Finance and E-Commerce Sites

Overview of Cyberattacks on Israeli Infrastructure

Between October 6 and 8, 2025, the pro-Russian hacktivist group NoName057(16) executed a series of coordinated cyberattacks targeting Israeli infrastructure. These attacks coincided with the anniversary of October 7 and involved multiple distributed denial-of-service (DDoS) assaults against government portals, financial institutions, and online commerce platforms.

The DDoS attacks orchestrated by NoName057(16) were directed at Israeli government assets, including political parties and municipal administrations. This activity marked a significant escalation in hacktivist operations aligned with pro-Palestinian cyber campaigns. On October 7 alone, over 57 DDoS attack claims were documented, exceeding 14 times the daily average observed in September 2025.

DDoS attack claims per day targeting Israel between October 1 and 12, 2025 .

During this period, the average number of attack claims per week increased by nearly 200% compared to the preceding weeks, highlighting the coordinated efforts among various threat groups.

Government portals were the most frequently targeted sector during the attack window, followed by business and e-commerce websites. Hacktivists aimed to disrupt both symbolic government services and commercial operations with high public visibility, impacting economic activity. Financial services accounted for approximately seven percent of total attack claims, alongside sectors such as education, healthcare, manufacturing, and retail.

Top targeted Israeli industries between October 6 and 8 .

NoName057(16) conducted 12 DDoS attacks within this three-day period, distinguishing itself as the only Russian-aligned hacktivist collective participating in the pro-Palestinian campaign. The group shared check-host verification links to substantiate its claims, a hallmark of its operational methodology.

In addition to targeting Israeli assets, the group extended its campaign to include German websites, perceived as pro-Israeli in its communications. This reflects a broader information warfare agenda where geopolitical alignment influences target selection.

The period around October 7 serves as a rallying point for pro-Palestinian and anti-Israeli groups globally, with calls for coordinated cyber action spread through platforms like Telegram. This anniversary has consistently catalyzed increased hacktivist activities over the past two years.

Defacement claims posted by Arabian Ghosts .

NoName057(16)'s involvement in the October 7 campaign underscores how established pro-Russian hacktivist collectives exploit geopolitical flashpoints to enhance visibility and reinforce ideological messaging, blurring the lines between cyber activism and information warfare.

Based on reporting by GBHackers.