Embed Notice

PSA for defenders, somebody appears to be copying NoName and doing shakedowns for Bitcoin payment.

They do a copycat layer 7 attack (the tooling real NoName use is basically lifted from Github), and then follow up with an email from "NoName057" for payment.

I'd strongly advise not paying and make sure your sites are behind a cloud WAF with rate limiting configured.

#threatintel #noname