Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:19:59 JST Kevin Beaumont

   #NoName plan to announce Sweden as DDoS targets later today.

   Targets:

   www.sundsvallshamn.se
   www.norrtag.se
   www.vasttrafik.se
   login.vasttrafik.se
   www.polisen.se
   www.msb.se
   login.msb.se
   www.transportstyrelsen.se
   www.digg.se
   www.sjofartsverket.se
   international.stockholm.se
   goteborg.se
   malmo.se
   www.uppsala.se
   www.linkoping.se
   www.orebro.se
   www.vasteras.se
   www.eskilstuna.se
   www.vgregion.se

   Target list and config: https://github.com/GossiTheDog/Monitoring/tree/main/NoName

   I have all of NoName's targeting in Excel if data needed.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:22:24 JST Kevin Beaumont

     in reply to

     There we go. #NoName #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 20-Dec-2023 20:22:25 JST Kevin Beaumont

     in reply to

     The screenshots are obviously the condensed version, they do webapp floods primarily, e.g.

     GreenSkyOverMe (Monika) repeated this.
   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:17 JST Kevin Beaumont

     in reply to

     #NoName DDoS will be going to Italy today.

     Their target list:
     www.giorgiameloni.it
     www.porto.trieste.it
     port.taranto.it
     www.sinfomar.it
     amat.cloud.eleagol.it
     www.sienamobilita.it
     www.gtt.to.it
     www.ctmcagliari.it
     actv.avmspa.it
     telematicoprova.adm.gov.it
     richiestamodifiche.adm.gov.it
     iampe.adm.gov.it
     telematico.adm.gov.it
     www.consob.it
     www.assosim.it
     www.agcm.it

     Target list and config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_21_10am.txt

     #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:02:42 JST Kevin Beaumont

     in reply to

     #NoName DDoS Finland today, as usual they failed to DDoS most of their targets properly.

     www.hsl.fi
     portofhanko.fi
     www.kyberturvallisuuskeskus.fi
     www.expressbus.fi
     www.ssvoy.fi
     virtuaali.vayla.fi
     sso.vayla.fi
     extranet.vayla.fi
     www.traficom.fi
     extidpevaluointi.traficom.fi
     extidptesti.traficom.fi
     ikkuna.traficom.fi
     eservices.traficom.fi
     paarautatieasema.fi
     www.ely-keskus.fi
     www.op.fi
     www.suomenpankki.fi
     www.vero.fi
     www.a-katsastus.fi

     Target list and config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_22_11am.txt #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:03:07 JST Kevin Beaumont

     in reply to

     #NoName swapped some of their targets

     www.hsl.fi
     portofhanko.fi
     www.edi.admin.ch
     www.sob.ch
     www.kyberturvallisuuskeskus.fi
     www.expressbus.fi
     www.ssvoy.fi
     virtuaali.vayla.fi
     sso.vayla.fi
     extranet.vayla.fi
     www.traficom.fi
     extidpevaluointi.traficom.fi
     extidptesti.traficom.fi
     ikkuna.traficom.fi
     paarautatieasema.fi
     www.op.fi
     www.suomenpankki.fi
     www.hotelleriesuisse.ch

     Config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_22_8pm.txt #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:03:09 JST Kevin Beaumont

     in reply to

     Btw #NoName use hardcoded server 94.140.115.89 as a C2, and there's no auto update in their DDoS agent which volunteers install, if anybody wants to disrupt them to the point where they have to beg people to reinstall the agent.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:04:13 JST Kevin Beaumont

     in reply to

     #NoName DDoS target list today

     www.vfgh.gv.at
     www.ris.bka.gv.at
     pa.eastcambs.gov.uk
     politics.leics.gov.uk
     www.a1.group
     www.e-steiermark.com
     www.liverpool.gov.uk
     www.bmeia.gv.at
     www.oesterreich.gv.at
     www.oebag.gv.at
     apa.at
     www.cranbrooktowncouncil.gov.uk
     www.wymetro.com
     travelsouthyorkshire.com
     mytsy.travelsouthyorkshire.com

     Botnet config: https://github.com/GossiTheDog/Monitoring/blob/main/NoName/targets_2023_12_23_1pm.txt

     #threatintel

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 15-Jan-2024 23:04:15 JST Kevin Beaumont

     in reply to

     #NoName are targeting the UK again today… but it’s the same targets for the last four weeks.

     I think it is state sponsored operation as they’re trying to meet targets and look busy.. they make even cyber hacktivism boring. I imagine David Brent is the office manager, doing an OKR dance.

     #threatintel