The notorious NoName ransomware group has reportedly targeted Moldova, targeting key government websites in what appears to be a strategic cyberattack . The recent alleged cyberattack on Moldova’s digital infrastructure has raised concerns about cybersecurity and geopolitical tensions in the region.
See also: NoName ransomware: Many organizations on its victim list
Entities reportedly affected in Moldova include vital government bodies such as the Presidency, the Ministry of Foreign Affairs, the Ministry of Interior, and the State Registry, among others. The cyberattack in Moldova left these websites inaccessible, displaying the ominous message, “You cannot view this website.”
Political motives behind the cyberattack on Moldova
While the extent of the cyberattack and the motive behind it have not been explicitly disclosed by the NoName ransomware group, a message left by the hackers hints at a political agenda. “greetings DDoS to the Moldovan state website in order to discourage the local government from promoting Russophobia,” the message reads. This suggests a possible attempt to influence Moldova’s foreign policy by targeting its digital infrastructure.
See also: NoName: DDoS attacks against Ukrainian government websites
The consequences of such cyberattacks in Moldova could be profound, affecting not only government operations but also the country’s stability and security . The ongoing tension between Moldova and Russia adds another layer of complexity to the situation, raising concerns about the possible involvement of state actors behind the cyberattack.
This is not the first time that the NoName ransomware group has launched such attacks. In March 2024, the group claimed responsibility for targeting several websites in Denmark, including key entities such as Movia, Din Offentlige Transport, the Ministry of Transport, Copenhagen Airports, and Danish Shipping. Similarly, in January of the same year, NoName targeted high-profile websites in the Netherlands, including OV-chipkaart, the Municipality of Vlaardingen, the Dutch Tax Authority (Belastingdienst), and GVB.
These incidents serve as a wake-up call for governments around the world to prioritize cybersecurity and invest in robust defense mechanisms to protect their digital assets. The increasing sophistication of cybercriminals, coupled with geopolitical tensions, underscores the need for proactive measures to protect critical infrastructure and ensure the integrity of government operations.
See also: NoName: Strikes Spanish websites in solidarity with protesting farmers
What are the best practices for dealing with ransomware attacks?
User education is crucial to counter attacks like the NoName ransomware group. Users should be aware of the risks associated with opening emails or attachments from unknown sources, as well as visiting dangerous websites. Using up-to-date security software is another important practice. It is important to keep all operating systems and applications up-to-date. Creating and maintaining backups of important data in a secure location is another good practice. Finally, using tools that restrict the ability of applications to make changes to the system can also be helpful. This can include using application restriction software or implementing security policies that restrict the execution of files in specific locations.
Source: thecyberexpress
☁️ Keep safe copies with Proton Drive
Encrypted cloud storage from Proton — protect your files from ransomware, corruption, and data loss with end-to-end encryption.
- ✔ End-to-end encrypted files & backups
- ✔ Version history — recover files after ransomware
- ✔ Free space — sync across all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
