NoName DDoS Attacks Disrupt Ukrainian Government Services

Allegedly, the NoName ransomware group has targeted various Ukrainian government websites, causing disruptions for entities such as Accordbank, Zaporizhzhya Titanium-Magnesium Plant, State Tax Service, Central Interregional Tax Administration, Tax Administration Western Interregional and the Central Office of the State Tax Service in Kyiv.

The affected websites, linked to the NoName ransomware group, experienced connectivity issues, displaying error messages like “403 Forbidden.” The group published a list of their latest victims on their dark web leak portal, with screenshots shared on Twitter. The dark web post contained a message stating, “We continue to nightmare Ukrainian sites (evil emoji).”

Several Ukrainian government websites, including those of the State Tax Service, Central Interregional Tax Administration, Western Interregional Tax Administration, and the Main Directorate of the State Tax Service in Kyiv, showed bad gateway and error messages.

Notably, the Accordbank website exhibited a “403 Forbidden” error message. Similarly, the Ukrainian State Tax Service website displayed a message indicating it couldn’t be reached, with a screenshot provided.

Given the interconnectedness of the websites, it appears that the NoName ransomware attack on Ukraine’s State Tax Service has also impacted the linked sites. The ongoing cyber conflict between Russia and Ukraine has seen hacktivist groups on both sides targeting each other, either with government backing or as acts of cyber patriotism.

Prior to the reported NoName ransomware attack on Ukraine, the same hacker collective targeted multiple Finnish government websites. On the dark web, the group declared, “Finland continues to receive our New Year’s gifts (evil smile emoji),” indicating an attempt to disrupt critical infrastructure and cause chaos for Finnish citizens. The Finnish victims of NoName DDoS attacks were exclusively government organizations associated with transport facilities.