Recently, a series of DDoS attacks carried out by the pro-Russian hacker group NoName057(16) targeted Danish government and defense websites. Just this week, they attacked critical online services and took them offline temporarily. The hack raises the question of cybersecurity and the state of Europe’s digital defenses, and European countries will be scrutinizing their own systems for weaknesses.
Authorities in Denmark reported that the DDoS attacks were aimed at government portals
Although the websites were only offline for a moment, the inconvenience to citizens and officials who could not access services was significant. This is politically charged and is due to the increased geopolitical tension and discussions regarding military aid to Ukraine.
Because DDoS attacks do not involve the entry of data into a system, officials stated that no sensitive data was compromised. Although this is correct, public service attacks show just how fragile public system services are. Providers of these services are targeted by large coordinated cyber attacks. This also shows the increased capabilities of hacktivist Russian-affiliated groups.
Who is NoName057(16) and what threat does the group present?
Pro-Russia hacktivist collective NoName057(16) has emerged as a notable actor since the Ukraine invasion in March 2022. The group has consistently engaged in cyber DDoS attacks on government and corporate sites across Europe. Particularly, targets are European countries with military and political support for Ukraine. DDoS attacks are characterized by over-flooding a server with a massive amount of requests, rendering websites and online services useless.
Because of the ideology behind NoName057(16) attacks, they do not operate as a ransomware gang, where hacking is done for financial gain. The group’s ideology drives them to disrupt and embarrass governments they view as anti-Russian. Attacks are framed on Telegram as acts of defense against those obstructing Ukraine.
The latest attacks on critical Danish infrastructure coincide with Denmark’s support for Ukraine
The attacks coincide with Denmark’s support for Ukraine, both military and in NATO’s proposed security framework for Ukraine. Cybersecurity analysts consider these attacks as part of a campaign to destabilize European countries and undermine their confidence in their ability to defend critical systems.
The targeting of political parties and democratic protests over elections in Denmark is not new and speaks to political parties in the democratic elections across the world. While DDoS attacks do cause some damage to an operating system, their socio-political impacts are more damaging to democratic digital governance.
The government of Denmark is conducting an investigation and collaborating with other government authorities, as a cyber crisis is projected to strengthen Danish cyber defense.
Danish authorities took an emergency response to quickly restore disrupted services
Danish authorities had to activate their emergency plans, which prevented more severe disruptions. Governments are advised to strengthen their cyber defense system to mitigate DDoS attacks by adopting a multi-layered cyber defense system, implementing a traffic filter, a mitigated system, and a cloud management system, and through active cyber monitoring.
Awareness campaigns also serve an important purpose of educating people about the attacks while alleviating fears associated with public services being taken offline. The attacks in Denmark are a part of a broader trend across the continent of politically motivated cyberattacks. Poland, Lithuania, and Finland are countries also being targeted similarly, with attacks being perpetrated by pro-Russian actors in cyber warfare. Analysts are predicting that cyberattacks will more likely be used by state-sponsored groups in response to the escalation of geopolitical tensions. Even the United States should be on higher alert for similar attacks on critical systems.
For Denmark, the incident serves as a frightening reminder that, as of now, cybersecurity is a matter of national security. Even though the damage that was done was localized, the implications for Denmark, especially on the international stage, will greatly influence the policies that will be coming into effect in the upcoming months.
