| # | domain | network | attack type |
|---|
2026-04-23_08-10-08
The attacks by noname057(16) primarily targeted websites in Poland. Key regions affected include Kielce, Poznań, Opole, Lublin, and Silesia. The attacks seem to focus on local government and administrative sites, indicating a potential interest in disrupting public services or gathering sensitive information.AI generated20 targets are under attack, 9 new targets and 11 targets from previous attack
New Targets(9): www.poznan.pl, www.powiat.lublin.pl, lublin.eu, www.lubelskie.pl, www.kielce.eu, www.powiat.kielce.pl, www.powiatzary.pl, www.poznan.uw.gov.pl, lubuskie.pl
Targets from prev attack(11): www.kartuzy.pl, kartuskipowiat.pl, ustrzyki-dolne.pl, www.slaskie.pl, www.sosnowiec.pl, www.czestochowa.pl, www.czarnabialostocka.pl, www.opole.pl, www.bieszczadzki.pl, www.wejherowo.pl, www.kielce.uw.gov.pl
Dismissed Targets(0):
New Targets(9): www.poznan.pl, www.powiat.lublin.pl, lublin.eu, www.lubelskie.pl, www.kielce.eu, www.powiat.kielce.pl, www.powiatzary.pl, www.poznan.uw.gov.pl, lubuskie.pl
Targets from prev attack(11): www.kartuzy.pl, kartuskipowiat.pl, ustrzyki-dolne.pl, www.slaskie.pl, www.sosnowiec.pl, www.czestochowa.pl, www.czarnabialostocka.pl, www.opole.pl, www.bieszczadzki.pl, www.wejherowo.pl, www.kielce.uw.gov.pl
Dismissed Targets(0):
2026-04-23_08-05-08
Noname057(16) has targeted various websites primarily in Poland. The attacked sites include local government and community portals, indicating a focus on regional authorities. Key cities under attack include Kartuzy, Ustrzyki Dolne, Sosnowiec, Częstochowa, and Opole, among others. The attacks highlight a concentrated effort against Polish municipal and administrative online resources.AI generated11 targets are under attack, 11 new targets and 0 targets from previous attack
New Targets(11): www.kartuzy.pl, kartuskipowiat.pl, ustrzyki-dolne.pl, www.slaskie.pl, www.sosnowiec.pl, www.czestochowa.pl, www.czarnabialostocka.pl, www.opole.pl, www.bieszczadzki.pl, www.wejherowo.pl, www.kielce.uw.gov.pl
Targets from prev attack(0):
Dismissed Targets(29): energaostroleka.pl, www.iskra.zp.ua, www.tor.gov.ua, sklep.stomil-bydgoszcz.pl, zkr.com.ua, energa-wytwarzanie.pl, www.abw.gov.pl, lemtrans.com.ua, energa-oswietlenie.pl, mazowieckie.com.pl, skm.warszawa.pl, keramet.com.ua, www.cenzin.com, www.maskpol.com.pl, www.krruda.dp.ua, pho.pl, www.srdsc.com, stomil-bydgoszcz.pl, www.energa-kogeneracja.pl, www.zmt.tarnow.pl, www.test.khadb.kh.ua, rafineriagdanska.pl, www.knf.gov.pl, www.pzlmielec.pl, www.kvsz.com, obrum.pl, www.kza.com.ua, zdm-przemysl.com, www.mesko.com.pl
New Targets(11): www.kartuzy.pl, kartuskipowiat.pl, ustrzyki-dolne.pl, www.slaskie.pl, www.sosnowiec.pl, www.czestochowa.pl, www.czarnabialostocka.pl, www.opole.pl, www.bieszczadzki.pl, www.wejherowo.pl, www.kielce.uw.gov.pl
Targets from prev attack(0):
Dismissed Targets(29): energaostroleka.pl, www.iskra.zp.ua, www.tor.gov.ua, sklep.stomil-bydgoszcz.pl, zkr.com.ua, energa-wytwarzanie.pl, www.abw.gov.pl, lemtrans.com.ua, energa-oswietlenie.pl, mazowieckie.com.pl, skm.warszawa.pl, keramet.com.ua, www.cenzin.com, www.maskpol.com.pl, www.krruda.dp.ua, pho.pl, www.srdsc.com, stomil-bydgoszcz.pl, www.energa-kogeneracja.pl, www.zmt.tarnow.pl, www.test.khadb.kh.ua, rafineriagdanska.pl, www.knf.gov.pl, www.pzlmielec.pl, www.kvsz.com, obrum.pl, www.kza.com.ua, zdm-przemysl.com, www.mesko.com.pl
2026-04-22_12-05-08
The attacks attributed to noname057(16) primarily targeted websites in Ukraine and Poland. Key sectors affected include government, energy, and transportation. Notable targets include various regional government sites in Ukraine, such as tor.gov.ua and kza.com.ua, as well as multiple Polish entities like energa-oswietlenie.pl and abw.gov.pl.AI generated29 targets are under attack, 10 new targets and 19 targets from previous attack
New Targets(10): www.srdsc.com, www.kza.com.ua, www.iskra.zp.ua, www.test.khadb.kh.ua, zkr.com.ua, www.tor.gov.ua, lemtrans.com.ua, www.kvsz.com, keramet.com.ua, www.krruda.dp.ua
Targets from prev attack(19): www.zmt.tarnow.pl, stomil-bydgoszcz.pl, mazowieckie.com.pl, zdm-przemysl.com, energa-oswietlenie.pl, www.abw.gov.pl, sklep.stomil-bydgoszcz.pl, www.maskpol.com.pl, www.cenzin.com, skm.warszawa.pl, energa-wytwarzanie.pl, energaostroleka.pl, rafineriagdanska.pl, www.mesko.com.pl, www.pzlmielec.pl, pho.pl, www.knf.gov.pl, obrum.pl, www.energa-kogeneracja.pl
Dismissed Targets(0):
New Targets(10): www.srdsc.com, www.kza.com.ua, www.iskra.zp.ua, www.test.khadb.kh.ua, zkr.com.ua, www.tor.gov.ua, lemtrans.com.ua, www.kvsz.com, keramet.com.ua, www.krruda.dp.ua
Targets from prev attack(19): www.zmt.tarnow.pl, stomil-bydgoszcz.pl, mazowieckie.com.pl, zdm-przemysl.com, energa-oswietlenie.pl, www.abw.gov.pl, sklep.stomil-bydgoszcz.pl, www.maskpol.com.pl, www.cenzin.com, skm.warszawa.pl, energa-wytwarzanie.pl, energaostroleka.pl, rafineriagdanska.pl, www.mesko.com.pl, www.pzlmielec.pl, pho.pl, www.knf.gov.pl, obrum.pl, www.energa-kogeneracja.pl
Dismissed Targets(0):
2026-04-22_09-45-07
The attacks attributed to noname057 primarily targeted websites in Poland. Key sectors affected include government, energy, and transportation, with notable sites such as the Polish Internal Security Agency (abw.gov.pl), various energy companies (energa-wytwarzanie.pl, energa-oswietlenie.pl), and transportation services (skm.warszawa.pl). This indicates a focus on critical infrastructure and public services within the country.AI generated19 targets are under attack, 6 new targets and 13 targets from previous attack
New Targets(6): www.energa-kogeneracja.pl, rafineriagdanska.pl, www.knf.gov.pl, pho.pl, energa-wytwarzanie.pl, energa-oswietlenie.pl
Targets from prev attack(13): www.maskpol.com.pl, sklep.stomil-bydgoszcz.pl, obrum.pl, www.pzlmielec.pl, www.mesko.com.pl, mazowieckie.com.pl, www.cenzin.com, www.zmt.tarnow.pl, www.abw.gov.pl, stomil-bydgoszcz.pl, energaostroleka.pl, zdm-przemysl.com, skm.warszawa.pl
Dismissed Targets(0):
New Targets(6): www.energa-kogeneracja.pl, rafineriagdanska.pl, www.knf.gov.pl, pho.pl, energa-wytwarzanie.pl, energa-oswietlenie.pl
Targets from prev attack(13): www.maskpol.com.pl, sklep.stomil-bydgoszcz.pl, obrum.pl, www.pzlmielec.pl, www.mesko.com.pl, mazowieckie.com.pl, www.cenzin.com, www.zmt.tarnow.pl, www.abw.gov.pl, stomil-bydgoszcz.pl, energaostroleka.pl, zdm-przemysl.com, skm.warszawa.pl
Dismissed Targets(0):
2026-04-22_09-40-07
NoName057(16) has targeted several websites primarily from Poland. The attacked sites include various organizations and companies, such as Stomil Bydgoszcz, Maskpol, PZL Mielec, and Mesko, indicating a focus on the defense and industrial sectors. Additionally, government-related sites like ABW (Internal Security Agency) were also compromised, highlighting a significant threat to national security and critical infrastructure in Poland.AI generated13 targets are under attack, 5 new targets and 8 targets from previous attack
New Targets(5): www.pzlmielec.pl, mazowieckie.com.pl, www.mesko.com.pl, skm.warszawa.pl, energaostroleka.pl
Targets from prev attack(8): stomil-bydgoszcz.pl, sklep.stomil-bydgoszcz.pl, www.maskpol.com.pl, www.zmt.tarnow.pl, zdm-przemysl.com, obrum.pl, www.abw.gov.pl, www.cenzin.com
Dismissed Targets(0):
New Targets(5): www.pzlmielec.pl, mazowieckie.com.pl, www.mesko.com.pl, skm.warszawa.pl, energaostroleka.pl
Targets from prev attack(8): stomil-bydgoszcz.pl, sklep.stomil-bydgoszcz.pl, www.maskpol.com.pl, www.zmt.tarnow.pl, zdm-przemysl.com, obrum.pl, www.abw.gov.pl, www.cenzin.com
Dismissed Targets(0):
2026-04-22_09-35-07
Noname057(16) has targeted various websites primarily in Poland. The attacked sites include stomil-bydgoszcz.pl and sklep.stomil-bydgoszcz.pl, both associated with a local company, as well as maskpol.com.pl, zmt.tarnow.pl, and cenzin.com, which are linked to different sectors. The attack also affected zdm-przemysl.com, abw.gov.pl, and obrum.pl, indicating a focus on governmental and defense-related entities.AI generated8 targets are under attack, 6 new targets and 2 targets from previous attack
New Targets(6): stomil-bydgoszcz.pl, sklep.stomil-bydgoszcz.pl, www.zmt.tarnow.pl, zdm-przemysl.com, www.abw.gov.pl, obrum.pl
Targets from prev attack(2): www.maskpol.com.pl, www.cenzin.com
Dismissed Targets(0):
New Targets(6): stomil-bydgoszcz.pl, sklep.stomil-bydgoszcz.pl, www.zmt.tarnow.pl, zdm-przemysl.com, www.abw.gov.pl, obrum.pl
Targets from prev attack(2): www.maskpol.com.pl, www.cenzin.com
Dismissed Targets(0):
2026-04-22_09-30-06
Noname057(16) has targeted websites primarily in Poland, including Maskpol and Cenzin. These attacks highlight a focus on Polish defense and manufacturing sectors, indicating a strategic interest in disrupting operations within these industries.AI generated2 targets are under attack, 2 new targets and 0 targets from previous attack
New Targets(2): www.maskpol.com.pl, www.cenzin.com
Targets from prev attack(0):
Dismissed Targets(0):
New Targets(2): www.maskpol.com.pl, www.cenzin.com
Targets from prev attack(0):
Dismissed Targets(0):
2026-04-22_09-25-06
Noname057(16) has targeted various websites primarily in countries such as the United States, Canada, and several European nations. The attacks have focused on sectors like government, education, and technology, indicating a broad range of interests and potential motivations behind these cyber operations.AI generated0 targets are under attack, 0 new targets and 0 targets from previous attack
New Targets(0):
Targets from prev attack(0):
Dismissed Targets(25): www.nitrochem.com.pl, www.autokraz.com.ua, pcosa.com.pl, dezamet.com.pl, ukrjet.ua, umwd.dolnyslask.pl, deviro.ua, warmia.mazury.pl, tochprilad.com, telesystem.eu, www.blik.com, www.belma.pl, www.inowroclaw.powiat.pl, www.play.pl, www.pitradwar.com, chezara-telemetria.com, www.bumar.gliwice.pl, athlonavia.com, login.play.pl, www.azot.com.ua, www.erzeszow.pl, gamrat.pl, www.mpk.poznan.pl, sparing-vist.ua, elta.com.pl
New Targets(0):
Targets from prev attack(0):
Dismissed Targets(25): www.nitrochem.com.pl, www.autokraz.com.ua, pcosa.com.pl, dezamet.com.pl, ukrjet.ua, umwd.dolnyslask.pl, deviro.ua, warmia.mazury.pl, tochprilad.com, telesystem.eu, www.blik.com, www.belma.pl, www.inowroclaw.powiat.pl, www.play.pl, www.pitradwar.com, chezara-telemetria.com, www.bumar.gliwice.pl, athlonavia.com, login.play.pl, www.azot.com.ua, www.erzeszow.pl, gamrat.pl, www.mpk.poznan.pl, sparing-vist.ua, elta.com.pl
2026-04-21_12-05-08
The attacks attributed to noname057 primarily targeted websites in Poland and Ukraine. Key sectors affected include telecommunications, transportation, and manufacturing. Notable Polish sites include Bumar, Play, and MPK Poznan, while Ukrainian targets include Autokraz and Ukrjet. The campaign highlights a focus on critical infrastructure and service providers in these regions.AI generated25 targets are under attack, 8 new targets and 17 targets from previous attack
New Targets(8): chezara-telemetria.com, www.autokraz.com.ua, deviro.ua, sparing-vist.ua, ukrjet.ua, athlonavia.com, www.azot.com.ua, tochprilad.com
Targets from prev attack(17): www.belma.pl, elta.com.pl, www.nitrochem.com.pl, www.blik.com, www.mpk.poznan.pl, gamrat.pl, dezamet.com.pl, login.play.pl, www.pitradwar.com, www.bumar.gliwice.pl, www.inowroclaw.powiat.pl, warmia.mazury.pl, pcosa.com.pl, www.play.pl, umwd.dolnyslask.pl, www.erzeszow.pl, telesystem.eu
Dismissed Targets(0):
New Targets(8): chezara-telemetria.com, www.autokraz.com.ua, deviro.ua, sparing-vist.ua, ukrjet.ua, athlonavia.com, www.azot.com.ua, tochprilad.com
Targets from prev attack(17): www.belma.pl, elta.com.pl, www.nitrochem.com.pl, www.blik.com, www.mpk.poznan.pl, gamrat.pl, dezamet.com.pl, login.play.pl, www.pitradwar.com, www.bumar.gliwice.pl, www.inowroclaw.powiat.pl, warmia.mazury.pl, pcosa.com.pl, www.play.pl, umwd.dolnyslask.pl, www.erzeszow.pl, telesystem.eu
Dismissed Targets(0):
2026-04-21_08-05-07
Noname057(16) has targeted various websites primarily in Poland. The attacked sites include local government platforms, financial services, and companies in different sectors such as manufacturing and telecommunications. Key countries under attack are Poland, with notable mentions of specific cities like Erzeszow, Poznan, and Inowroclaw.AI generated17 targets are under attack, 17 new targets and 0 targets from previous attack
New Targets(17): gamrat.pl, pcosa.com.pl, www.blik.com, www.inowroclaw.powiat.pl, warmia.mazury.pl, elta.com.pl, dezamet.com.pl, www.nitrochem.com.pl, www.play.pl, telesystem.eu, login.play.pl, www.belma.pl, www.mpk.poznan.pl, www.bumar.gliwice.pl, www.erzeszow.pl, www.pitradwar.com, umwd.dolnyslask.pl
Targets from prev attack(0):
Dismissed Targets(30): powiat.krakow.pl, cs.orlen.pl, zmturbines.com, www.nowotarski.pl, asfalt.orlen.pl, ukrspecexport.com, budonaft.orlen.pl, neptun.orlen.pl, eko.orlen.pl, aviation.orlen.pl, administracja.orlen.pl, www.malyshevplant.com, www.malopolskie.pl, energia.orlen.pl, www.ferrexpo.ua, aesgroup.com.ua, ivchenko-progress.com, www.miasto.zgierz.pl, nowosadecki.iap.pl, www.morozov.com.ua, cuk.orlen.pl, www.nowysacz.pl, erc.ua, www.powiat.tarnow.pl, www.orlen.pl, spetstechnoexport.com, photopribor.ck.ua, www.tarnow.pl, www.powiat.zgierz.pl, www.krakow.pl
New Targets(17): gamrat.pl, pcosa.com.pl, www.blik.com, www.inowroclaw.powiat.pl, warmia.mazury.pl, elta.com.pl, dezamet.com.pl, www.nitrochem.com.pl, www.play.pl, telesystem.eu, login.play.pl, www.belma.pl, www.mpk.poznan.pl, www.bumar.gliwice.pl, www.erzeszow.pl, www.pitradwar.com, umwd.dolnyslask.pl
Targets from prev attack(0):
Dismissed Targets(30): powiat.krakow.pl, cs.orlen.pl, zmturbines.com, www.nowotarski.pl, asfalt.orlen.pl, ukrspecexport.com, budonaft.orlen.pl, neptun.orlen.pl, eko.orlen.pl, aviation.orlen.pl, administracja.orlen.pl, www.malyshevplant.com, www.malopolskie.pl, energia.orlen.pl, www.ferrexpo.ua, aesgroup.com.ua, ivchenko-progress.com, www.miasto.zgierz.pl, nowosadecki.iap.pl, www.morozov.com.ua, cuk.orlen.pl, www.nowysacz.pl, erc.ua, www.powiat.tarnow.pl, www.orlen.pl, spetstechnoexport.com, photopribor.ck.ua, www.tarnow.pl, www.powiat.zgierz.pl, www.krakow.pl
2026-04-20_12-05-09
The attacks attributed to noname057 primarily targeted websites in Ukraine and Poland. Key sectors affected include energy, defense, and local government services. Notable Ukrainian sites include those of Ferrexpo, Ukrspecexport, and various regional administrations. In Poland, several Orlen-related sites and local government websites were also compromised. The attacks highlight a focus on critical infrastructure and governmental entities in these countries.AI generated30 targets are under attack, 10 new targets and 20 targets from previous attack
New Targets(10): zmturbines.com, photopribor.ck.ua, ivchenko-progress.com, www.ferrexpo.ua, www.morozov.com.ua, www.malyshevplant.com, aesgroup.com.ua, ukrspecexport.com, spetstechnoexport.com, erc.ua
Targets from prev attack(20): neptun.orlen.pl, budonaft.orlen.pl, www.malopolskie.pl, cs.orlen.pl, eko.orlen.pl, cuk.orlen.pl, www.powiat.zgierz.pl, www.nowotarski.pl, www.tarnow.pl, www.krakow.pl, www.powiat.tarnow.pl, asfalt.orlen.pl, nowosadecki.iap.pl, energia.orlen.pl, www.orlen.pl, www.miasto.zgierz.pl, powiat.krakow.pl, aviation.orlen.pl, administracja.orlen.pl, www.nowysacz.pl
Dismissed Targets(0):
New Targets(10): zmturbines.com, photopribor.ck.ua, ivchenko-progress.com, www.ferrexpo.ua, www.morozov.com.ua, www.malyshevplant.com, aesgroup.com.ua, ukrspecexport.com, spetstechnoexport.com, erc.ua
Targets from prev attack(20): neptun.orlen.pl, budonaft.orlen.pl, www.malopolskie.pl, cs.orlen.pl, eko.orlen.pl, cuk.orlen.pl, www.powiat.zgierz.pl, www.nowotarski.pl, www.tarnow.pl, www.krakow.pl, www.powiat.tarnow.pl, asfalt.orlen.pl, nowosadecki.iap.pl, energia.orlen.pl, www.orlen.pl, www.miasto.zgierz.pl, powiat.krakow.pl, aviation.orlen.pl, administracja.orlen.pl, www.nowysacz.pl
Dismissed Targets(0):
2026-04-20_08-10-07
Noname057(16) has targeted various websites primarily in Poland. The attacked sites include those associated with local governments, energy companies, and infrastructure, indicating a focus on critical sectors. Key cities under attack include Krakow, Tarnow, Zgierz, and Nowy Sacz, highlighting a concentrated effort in the southern region of Poland.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.orlen.pl, www.nowysacz.pl, cuk.orlen.pl, www.miasto.zgierz.pl, www.tarnow.pl, www.nowotarski.pl, budonaft.orlen.pl, energia.orlen.pl, nowosadecki.iap.pl, asfalt.orlen.pl, powiat.krakow.pl, administracja.orlen.pl, neptun.orlen.pl, aviation.orlen.pl, www.malopolskie.pl, www.krakow.pl, www.powiat.zgierz.pl, cs.orlen.pl, eko.orlen.pl, www.powiat.tarnow.pl
Targets from prev attack(0):
Dismissed Targets(21): www.bnkfn.co.kr, dl.koroad.or.kr, www.safekorea.go.kr, daejeon.scourt.go.kr, inccaa.or.kr, www.skcc.co.kr, www.koreapost.go.kr, www.mobileid.go.kr, www.korad.or.kr, ecfs.scourt.go.kr, help.scourt.go.kr, www.clean.go.kr, www.kgs.or.kr, www.djpolice.go.kr, call.nts.go.kr, www.hancomgroup.com, d.nts.go.kr, www.komsco.com, www.ex.co.kr, www.koscom.co.kr, www.kogas.or.kr
New Targets(20): www.orlen.pl, www.nowysacz.pl, cuk.orlen.pl, www.miasto.zgierz.pl, www.tarnow.pl, www.nowotarski.pl, budonaft.orlen.pl, energia.orlen.pl, nowosadecki.iap.pl, asfalt.orlen.pl, powiat.krakow.pl, administracja.orlen.pl, neptun.orlen.pl, aviation.orlen.pl, www.malopolskie.pl, www.krakow.pl, www.powiat.zgierz.pl, cs.orlen.pl, eko.orlen.pl, www.powiat.tarnow.pl
Targets from prev attack(0):
Dismissed Targets(21): www.bnkfn.co.kr, dl.koroad.or.kr, www.safekorea.go.kr, daejeon.scourt.go.kr, inccaa.or.kr, www.skcc.co.kr, www.koreapost.go.kr, www.mobileid.go.kr, www.korad.or.kr, ecfs.scourt.go.kr, help.scourt.go.kr, www.clean.go.kr, www.kgs.or.kr, www.djpolice.go.kr, call.nts.go.kr, www.hancomgroup.com, d.nts.go.kr, www.komsco.com, www.ex.co.kr, www.koscom.co.kr, www.kogas.or.kr
2026-04-19_08-05-07
The attacks attributed to noname057 primarily target South Korea, with a focus on various sectors including government, finance, and technology. Key sites affected include judicial and law enforcement platforms, such as daejeon.scourt.go.kr and djpolice.go.kr, as well as major corporations like hancomgroup.com and skcc.co.kr. Additionally, critical infrastructure sites, including kogas.or.kr and safekorea.go.kr, are also under attack, indicating a broad and coordinated effort against South Korean entities.AI generated21 targets are under attack, 21 new targets and 0 targets from previous attack
New Targets(21): daejeon.scourt.go.kr, www.skcc.co.kr, www.hancomgroup.com, www.clean.go.kr, www.djpolice.go.kr, help.scourt.go.kr, www.mobileid.go.kr, www.kogas.or.kr, www.komsco.com, www.ex.co.kr, d.nts.go.kr, www.korad.or.kr, www.safekorea.go.kr, dl.koroad.or.kr, inccaa.or.kr, ecfs.scourt.go.kr, www.koreapost.go.kr, call.nts.go.kr, www.kgs.or.kr, www.koscom.co.kr, www.bnkfn.co.kr
Targets from prev attack(0):
Dismissed Targets(20): www.mofat.go.kr, www.mnd.go.kr, theminjoo.kr, win-win.korail.com, lawyer.korail.com, www.incheon.go.kr, www.customs.go.kr, www.pps.go.kr, www.assembly.go.kr, crew.korail.com, www.bkcba.or.kr, www.moj.go.kr, www.koneps.go.kr, www.daegu.go.kr, hikorea.go.kr, hometax.go.kr, www.jeju.go.kr, www.ulsan.go.kr, nas.na.go.kr, logis.korail.go.kr
New Targets(21): daejeon.scourt.go.kr, www.skcc.co.kr, www.hancomgroup.com, www.clean.go.kr, www.djpolice.go.kr, help.scourt.go.kr, www.mobileid.go.kr, www.kogas.or.kr, www.komsco.com, www.ex.co.kr, d.nts.go.kr, www.korad.or.kr, www.safekorea.go.kr, dl.koroad.or.kr, inccaa.or.kr, ecfs.scourt.go.kr, www.koreapost.go.kr, call.nts.go.kr, www.kgs.or.kr, www.koscom.co.kr, www.bnkfn.co.kr
Targets from prev attack(0):
Dismissed Targets(20): www.mofat.go.kr, www.mnd.go.kr, theminjoo.kr, win-win.korail.com, lawyer.korail.com, www.incheon.go.kr, www.customs.go.kr, www.pps.go.kr, www.assembly.go.kr, crew.korail.com, www.bkcba.or.kr, www.moj.go.kr, www.koneps.go.kr, www.daegu.go.kr, hikorea.go.kr, hometax.go.kr, www.jeju.go.kr, www.ulsan.go.kr, nas.na.go.kr, logis.korail.go.kr
2026-04-18_08-05-15
The attacks attributed to noname057(16) primarily target South Korea, affecting various government and transportation websites. Notable sites include the Ministry of National Defense, Korea Rail, and local government portals. The attacks highlight a focus on critical infrastructure and public services within South Korea.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): theminjoo.kr, www.mnd.go.kr, win-win.korail.com, www.koneps.go.kr, hikorea.go.kr, crew.korail.com, www.bkcba.or.kr, nas.na.go.kr, lawyer.korail.com, www.jeju.go.kr, www.incheon.go.kr, www.mofat.go.kr, www.customs.go.kr, logis.korail.go.kr, www.daegu.go.kr, www.pps.go.kr, www.moj.go.kr, www.ulsan.go.kr, www.assembly.go.kr, hometax.go.kr
Targets from prev attack(0):
Dismissed Targets(31): www.knoc.co.kr, apmoller.com, www.carlc.dk, home.kepco.co.kr, www.kins.re.kr, www.lh.or.kr, eltb2cprod.b2clogin.com, www.kepco-enc.com, nykjaerservice.dk, dable.io, dinoffentligetransport.dk, www.fkii.org, kogas-tech.or.kr, www.mofa.go.kr, www.knfc.co.kr, www.kdhc.co.kr, www.khnp.co.kr, english.motir.go.kr, eltilmelding.dk, www.hofor.dk, udbudsmedia.dk, forsyningstilsynet.dk, www.airtransport.or.kr, eng.sk.com, www.kaeri.re.kr, holbaek.dk, kfst.dk, www.motir.go.kr, www.sk.com, www.kepco.co.kr, esbjergairport.dk
New Targets(20): theminjoo.kr, www.mnd.go.kr, win-win.korail.com, www.koneps.go.kr, hikorea.go.kr, crew.korail.com, www.bkcba.or.kr, nas.na.go.kr, lawyer.korail.com, www.jeju.go.kr, www.incheon.go.kr, www.mofat.go.kr, www.customs.go.kr, logis.korail.go.kr, www.daegu.go.kr, www.pps.go.kr, www.moj.go.kr, www.ulsan.go.kr, www.assembly.go.kr, hometax.go.kr
Targets from prev attack(0):
Dismissed Targets(31): www.knoc.co.kr, apmoller.com, www.carlc.dk, home.kepco.co.kr, www.kins.re.kr, www.lh.or.kr, eltb2cprod.b2clogin.com, www.kepco-enc.com, nykjaerservice.dk, dable.io, dinoffentligetransport.dk, www.fkii.org, kogas-tech.or.kr, www.mofa.go.kr, www.knfc.co.kr, www.kdhc.co.kr, www.khnp.co.kr, english.motir.go.kr, eltilmelding.dk, www.hofor.dk, udbudsmedia.dk, forsyningstilsynet.dk, www.airtransport.or.kr, eng.sk.com, www.kaeri.re.kr, holbaek.dk, kfst.dk, www.motir.go.kr, www.sk.com, www.kepco.co.kr, esbjergairport.dk
2026-04-17_17-20-07
Noname057(16) has targeted websites primarily in Denmark and South Korea. The attacks have affected various sectors, including energy, transportation, and government services. Key targets include Danish sites like forsyningstilsynet.dk and holbaek.dk, as well as numerous South Korean sites such as kepco.co.kr and khnp.co.kr.AI generated31 targets are under attack, 0 new targets and 31 targets from previous attack
New Targets(0):
Targets from prev attack(31): www.kepco.co.kr, forsyningstilsynet.dk, holbaek.dk, dable.io, www.kepco-enc.com, www.airtransport.or.kr, www.khnp.co.kr, www.kins.re.kr, eltb2cprod.b2clogin.com, eng.sk.com, nykjaerservice.dk, eltilmelding.dk, english.motir.go.kr, www.hofor.dk, www.knfc.co.kr, www.sk.com, udbudsmedia.dk, esbjergairport.dk, kfst.dk, www.motir.go.kr, home.kepco.co.kr, www.kdhc.co.kr, www.lh.or.kr, www.kaeri.re.kr, www.fkii.org, dinoffentligetransport.dk, apmoller.com, www.knoc.co.kr, kogas-tech.or.kr, www.mofa.go.kr, www.carlc.dk
Dismissed Targets(1): www.kogas.or.kr
New Targets(0):
Targets from prev attack(31): www.kepco.co.kr, forsyningstilsynet.dk, holbaek.dk, dable.io, www.kepco-enc.com, www.airtransport.or.kr, www.khnp.co.kr, www.kins.re.kr, eltb2cprod.b2clogin.com, eng.sk.com, nykjaerservice.dk, eltilmelding.dk, english.motir.go.kr, www.hofor.dk, www.knfc.co.kr, www.sk.com, udbudsmedia.dk, esbjergairport.dk, kfst.dk, www.motir.go.kr, home.kepco.co.kr, www.kdhc.co.kr, www.lh.or.kr, www.kaeri.re.kr, www.fkii.org, dinoffentligetransport.dk, apmoller.com, www.knoc.co.kr, kogas-tech.or.kr, www.mofa.go.kr, www.carlc.dk
Dismissed Targets(1): www.kogas.or.kr
2026-04-17_12-05-08
Noname057(16) has targeted various websites primarily in Denmark and South Korea. The attacks include Danish government and utility sites such as forsyningstilsynet.dk and kogas.or.kr, as well as South Korean energy and transportation companies like kepco.co.kr and holbaek.dk. Other notable targets include organizations involved in public transport and energy sectors in both countries, indicating a focus on critical infrastructure.AI generated32 targets are under attack, 12 new targets and 20 targets from previous attack
New Targets(12): dinoffentligetransport.dk, kfst.dk, apmoller.com, eltilmelding.dk, www.hofor.dk, eltb2cprod.b2clogin.com, holbaek.dk, forsyningstilsynet.dk, www.carlc.dk, nykjaerservice.dk, esbjergairport.dk, udbudsmedia.dk
Targets from prev attack(20): www.kepco-enc.com, www.mofa.go.kr, english.motir.go.kr, www.kaeri.re.kr, home.kepco.co.kr, kogas-tech.or.kr, www.fkii.org, www.knfc.co.kr, www.kepco.co.kr, eng.sk.com, www.lh.or.kr, www.khnp.co.kr, www.knoc.co.kr, dable.io, www.kdhc.co.kr, www.motir.go.kr, www.sk.com, www.airtransport.or.kr, www.kins.re.kr, www.kogas.or.kr
Dismissed Targets(0):
New Targets(12): dinoffentligetransport.dk, kfst.dk, apmoller.com, eltilmelding.dk, www.hofor.dk, eltb2cprod.b2clogin.com, holbaek.dk, forsyningstilsynet.dk, www.carlc.dk, nykjaerservice.dk, esbjergairport.dk, udbudsmedia.dk
Targets from prev attack(20): www.kepco-enc.com, www.mofa.go.kr, english.motir.go.kr, www.kaeri.re.kr, home.kepco.co.kr, kogas-tech.or.kr, www.fkii.org, www.knfc.co.kr, www.kepco.co.kr, eng.sk.com, www.lh.or.kr, www.khnp.co.kr, www.knoc.co.kr, dable.io, www.kdhc.co.kr, www.motir.go.kr, www.sk.com, www.airtransport.or.kr, www.kins.re.kr, www.kogas.or.kr
Dismissed Targets(0):
2026-04-17_08-05-07
Noname057(16) has targeted several websites primarily from South Korea. The attacked sites include government and energy-related domains, indicating a focus on critical infrastructure. Key sectors affected include energy, transportation, and technology, with significant implications for national security and public services in South Korea.AI generated20 targets are under attack, 19 new targets and 1 targets from previous attack
New Targets(19): home.kepco.co.kr, www.mofa.go.kr, eng.sk.com, english.motir.go.kr, www.khnp.co.kr, www.kepco.co.kr, dable.io, kogas-tech.or.kr, www.sk.com, www.knfc.co.kr, www.kdhc.co.kr, www.kepco-enc.com, www.kins.re.kr, www.airtransport.or.kr, www.lh.or.kr, www.motir.go.kr, www.knoc.co.kr, www.kaeri.re.kr, www.fkii.org
Targets from prev attack(1): www.kogas.or.kr
Dismissed Targets(32): www.boliginstallatoren.dk, www.lx.or.kr, daejeon.scourt.go.kr, elcon.dk, www.kt.com, energinet.dk, borgernesparti.dk, www.hancomgroup.com, www.safekorea.go.kr, www.ncloud.com, www.ex.co.kr, www.komsco.com, bce.au.dk, www.djpolice.go.kr, radikalevenstre.dk, kj-el.dk, help.scourt.go.kr, www.skax.co.kr, www.koreapost.go.kr, brabrandel.dk, www.molit.go.kr, www.kesco.or.kr, konservative.dk, www.mobileid.go.kr, www.skcc.co.kr, www.korea.kr, login.konservative.dk, uggerly.dk, kron-el.dk, www.clean.go.kr, auth.ncloud.com, ecfs.scourt.go.kr
New Targets(19): home.kepco.co.kr, www.mofa.go.kr, eng.sk.com, english.motir.go.kr, www.khnp.co.kr, www.kepco.co.kr, dable.io, kogas-tech.or.kr, www.sk.com, www.knfc.co.kr, www.kdhc.co.kr, www.kepco-enc.com, www.kins.re.kr, www.airtransport.or.kr, www.lh.or.kr, www.motir.go.kr, www.knoc.co.kr, www.kaeri.re.kr, www.fkii.org
Targets from prev attack(1): www.kogas.or.kr
Dismissed Targets(32): www.boliginstallatoren.dk, www.lx.or.kr, daejeon.scourt.go.kr, elcon.dk, www.kt.com, energinet.dk, borgernesparti.dk, www.hancomgroup.com, www.safekorea.go.kr, www.ncloud.com, www.ex.co.kr, www.komsco.com, bce.au.dk, www.djpolice.go.kr, radikalevenstre.dk, kj-el.dk, help.scourt.go.kr, www.skax.co.kr, www.koreapost.go.kr, brabrandel.dk, www.molit.go.kr, www.kesco.or.kr, konservative.dk, www.mobileid.go.kr, www.skcc.co.kr, www.korea.kr, login.konservative.dk, uggerly.dk, kron-el.dk, www.clean.go.kr, auth.ncloud.com, ecfs.scourt.go.kr
2026-04-16_12-05-08
Noname057(16) has targeted various websites primarily in Denmark and South Korea. The attacks have affected a range of sectors, including government, telecommunications, and technology. Key sites include those associated with Danish political parties, South Korean government services, and major corporations in both countries.AI generated33 targets are under attack, 12 new targets and 21 targets from previous attack
New Targets(12): kron-el.dk, konservative.dk, borgernesparti.dk, uggerly.dk, kj-el.dk, bce.au.dk, www.boliginstallatoren.dk, elcon.dk, energinet.dk, brabrandel.dk, login.konservative.dk, radikalevenstre.dk
Targets from prev attack(21): www.lx.or.kr, www.hancomgroup.com, auth.ncloud.com, www.mobileid.go.kr, www.koreapost.go.kr, www.korea.kr, daejeon.scourt.go.kr, www.skax.co.kr, www.ex.co.kr, help.scourt.go.kr, www.ncloud.com, www.clean.go.kr, www.djpolice.go.kr, www.komsco.com, www.kesco.or.kr, www.molit.go.kr, www.kogas.or.kr, ecfs.scourt.go.kr, www.skcc.co.kr, www.safekorea.go.kr, www.kt.com
Dismissed Targets(0):
New Targets(12): kron-el.dk, konservative.dk, borgernesparti.dk, uggerly.dk, kj-el.dk, bce.au.dk, www.boliginstallatoren.dk, elcon.dk, energinet.dk, brabrandel.dk, login.konservative.dk, radikalevenstre.dk
Targets from prev attack(21): www.lx.or.kr, www.hancomgroup.com, auth.ncloud.com, www.mobileid.go.kr, www.koreapost.go.kr, www.korea.kr, daejeon.scourt.go.kr, www.skax.co.kr, www.ex.co.kr, help.scourt.go.kr, www.ncloud.com, www.clean.go.kr, www.djpolice.go.kr, www.komsco.com, www.kesco.or.kr, www.molit.go.kr, www.kogas.or.kr, ecfs.scourt.go.kr, www.skcc.co.kr, www.safekorea.go.kr, www.kt.com
Dismissed Targets(0):
2026-04-16_08-05-07
The attacks attributed to noname057 primarily target South Korea, focusing on various government and private sector websites. Key sectors affected include judiciary, energy, telecommunications, and public safety, highlighting a significant threat landscape within the country.AI generated21 targets are under attack, 21 new targets and 0 targets from previous attack
New Targets(21): www.ex.co.kr, www.molit.go.kr, www.mobileid.go.kr, daejeon.scourt.go.kr, www.kogas.or.kr, www.lx.or.kr, www.komsco.com, www.kt.com, www.skcc.co.kr, www.safekorea.go.kr, www.korea.kr, help.scourt.go.kr, www.kesco.or.kr, www.hancomgroup.com, ecfs.scourt.go.kr, www.clean.go.kr, www.djpolice.go.kr, auth.ncloud.com, www.koreapost.go.kr, www.skax.co.kr, www.ncloud.com
Targets from prev attack(0):
Dismissed Targets(32): traveltrade.visitgreenland.com, www.moleg.go.kr, www.spo.go.kr, home.kepco.co.kr, www.qq.dk, www.mofat.go.kr, www.bnkfn.co.kr, ens.dk, workindenmark.dk, call.nts.go.kr, mit.dk, www.customs.go.kr, inccaa.or.kr, dj.nec.go.kr, www.moj.go.kr, www.stamps.gl, www.taarnby.dk, d.nts.go.kr, www.mois.go.kr, hvidvask.dk, cyber.kepco.co.kr, www.kgs.or.kr, www.mnd.go.kr, www.korad.or.kr, dl.koroad.or.kr, www.koscom.co.kr, nyidanmark.dk, www.seincustoms.com, www.k-ea.kr, arcticexcursions.com, expeditionsgreenland.gl, www.sdu.dk
New Targets(21): www.ex.co.kr, www.molit.go.kr, www.mobileid.go.kr, daejeon.scourt.go.kr, www.kogas.or.kr, www.lx.or.kr, www.komsco.com, www.kt.com, www.skcc.co.kr, www.safekorea.go.kr, www.korea.kr, help.scourt.go.kr, www.kesco.or.kr, www.hancomgroup.com, ecfs.scourt.go.kr, www.clean.go.kr, www.djpolice.go.kr, auth.ncloud.com, www.koreapost.go.kr, www.skax.co.kr, www.ncloud.com
Targets from prev attack(0):
Dismissed Targets(32): traveltrade.visitgreenland.com, www.moleg.go.kr, www.spo.go.kr, home.kepco.co.kr, www.qq.dk, www.mofat.go.kr, www.bnkfn.co.kr, ens.dk, workindenmark.dk, call.nts.go.kr, mit.dk, www.customs.go.kr, inccaa.or.kr, dj.nec.go.kr, www.moj.go.kr, www.stamps.gl, www.taarnby.dk, d.nts.go.kr, www.mois.go.kr, hvidvask.dk, cyber.kepco.co.kr, www.kgs.or.kr, www.mnd.go.kr, www.korad.or.kr, dl.koroad.or.kr, www.koscom.co.kr, nyidanmark.dk, www.seincustoms.com, www.k-ea.kr, arcticexcursions.com, expeditionsgreenland.gl, www.sdu.dk