Ddosia

Ddosia, a project launched by the pro-Russian hacktivist group NoName057(16), is a significant threat actor that has been facilitating continuous DDoS attacks on government and private organization websites. Initiated in July 2022, the Ddosia project mirrors similar initiatives like the pro-Ukrainian Liberator by disBalancer and the fully automated DDoS bot project by the IT ARMY of Ukraine. The project harnesses the power of politically driven hacktivists who willingly download and install a bot on their computers to launch denial-of-service attacks, primarily targeting Western nations supporting Ukraine amidst Russia's ongoing invasion. The Ddosia project has seen substantial growth since its inception, with NoName057(16) amassing a following of 40,000 members and the Ddosia volunteer botnet project reaching 7,000 members. In an innovative twist, Ddosia has gamified DDoS attacks, offering financial incentives to top contributors of successful denial-of-service attacks. The project allows NoName to commandeer host computers and their internet connections for coordinated DDoS campaigns. As of late 2023, Ddosia's Telegram project had nearly 20,000 users, while NoName057(16)'s channels had surpassed 60,000, doubling since the previous year. Despite its success, Ddosia faces some challenges. The software lacks automated IP address change capabilities, necessitating frequent C2 server changes. While the latest software version improved data transmission, Ddosia admins had to frequently alter the C2 servers in 2024 due to stability issues. However, the group continues to innovate; as recently as November 11, 2023, Project Ddosia expanded processor support to 32-bit and added FreeBSD compatibility, further enhancing its potential impact.