Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:08 JST Kevin Beaumont

   NoName057(16) are targeting the UK today, so I shall start monitoring them and naming their targets and attack types.

   Their targeting: https://raw.githubusercontent.com/GossiTheDog/Monitoring/main/NoName/targets_2023_12_07_11am.txt

   Currently:
   pa.eastcambs.gov.uk
   politics.leics.gov.uk
   www.liverpool.gov.uk
   www.mil.be
   www.bollington-tc.gov.uk
   www.cranbrooktowncouncil.gov.uk
   cert.be
   my.swiftcard.org.uk
   www.monarchie.be
   www.premier.be
   www.david-clarinval.be
   www.dekamer.be
   www.senaat.be

   #threatintel #noname

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:34 JST Kevin Beaumont

     in reply to

     Later today #NoName will announce they are attacking:

     cts21.czechtrade.cz
     www.mzv.cz
     klient.czechtrade.cz
     www.czechtrade.cz
     exporters.czechtrade.cz
     www.dpp.cz
     www.pse.cz
     www.moneta.cz
     api.moneta.cz
     www.rzp.cz
     www.senat.cz
     pspen.psp.cz
     www.vlada.cz
     www.mvcr.cz
     www.financnisprava.cz
     www.policie.cz
     www.prg.aero
     gate.prg.aero
     newfids.prg.aero
     ftp.prg.aero
     fids.prg.aero
     idc-portal-tas.prg.aero

     Target list: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_08_10am.txt

     #precrime #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:35 JST Kevin Beaumont

     in reply to

     I wrote this up: https://doublepulsar.com/tracking-russias-noname057-16-attempts-to-ddos-uk-public-services-057e8ab54fe4

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:36 JST Kevin Beaumont

     in reply to

     This is how NoName[16] are DDoSing West Yorkshire Metro.. apparently it's enough to cause Azure App Gateway to fall over.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:37 JST Kevin Beaumont

     in reply to

     quick question - would publishing the NoName DDoS targets in a format like this each day be valuable?

     I just had a quick workflow play, I think I can do it.

     #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:39 JST Kevin Beaumont

     in reply to

     Keep up, NoName. Edit: to be clear I mean catch up as I already named these.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:18:40 JST Kevin Beaumont

     in reply to

     Note this list includes targets they haven't announced yet on Telegram.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:19:02 JST Kevin Beaumont

     in reply to

     Today's #NoName DDoS targets #threatintel

     www.mtc.government.bg
     www.port-varna.bg
     port-burgas.bg
     www.parliament.bg
     customs.bg
     bulbankonline.bg
     dskbank.bg
     www.dskdirect.bg
     www.bnb.bg
     www.procreditbank.bg
     probanking.procreditbank.bg
     www.ccbank.bg
     www.fibank.bg
     my.fibank.bg
     testiam-idsext.customs.bg
     ids.customs.bg
     www.government.bg
     www.president.bg

     Target list: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_11_11am.txt

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:19:03 JST Kevin Beaumont

     in reply to

     Noname have named other targets already in the list. #NoName #precrime #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:19:05 JST Kevin Beaumont

     in reply to

     There we go. #NoName #precrime #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:20:06 JST Kevin Beaumont

     in reply to

     #NoName DDoS targets, UK and Norway. Includes a failed attempt at Rishi Sunak's website. #threatintel

     www.horiba-mira.com
     www.rotork.com
     www.lcia.org
     southendairport.com
     www.stortinget.no
     ruter.no
     www.autopass.no
     www.boreal.no
     www.sj.no
     bpsnord.no
     ferde.no
     www.nor-way.no
     dskbank.bg
     www.bnb.bg
     probanking.procreditbank.bg
     my.fibank.bg
     testiam-idsext.customs.bg
     www.government.bg
     www.president.bg
     www.rishisunak.com

     Target list: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_11_3pm.txt