ZeroFox Intelligence Flash Report - German Protests Supported by Pro-Russian Threat Actor

Product Serial: F-2024-01-12a

TLP:CLEAR

In this flash report, ZeroFox researchers report on the a pro-Russian threat actor group NoName057(16) hacking German websites in a show of support for protesting farmers.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

NoName057(16), a pro-Russian threat actor group that normally targets supporters of Ukraine, hacked German websites in a show of support for protesting farmers.
The group is likely opportunistically supporting the farmer protests because elements of the movement may be in favor of reducing the level of aid provided to Ukraine.
European Union (EU)-wide elections are scheduled for June 2024, and far-right politicians who oppose aid to Ukraine will likely perform well.
These politically-motivated hacks are intended primarily to stoke underlying social tensions while creating an impression of wider fissures in EU society, mainly around the cost of living and immigration, and are a common tactic of pro-Russia and Russian-sponsored actors.