Romania Under DDoS Attacks: Weekly DDoS Threat Intelligence Analysis

Between March 17–23, 2026, SOCRadar observed a major, coordinated DDoS campaign by pro‑Russian hacktivist NoName057(16) using the DDoSia framework that generated 13,716 attack instances across 148 domains and 134 IPs, with Romania as the primary focus (64.5%) and sustained targeting of Israeli defense-industrial entities; attacks were overwhelmingly L7 HTTPS GET/POST floods against finance, transportation, government, energy, and defense sectors, and the report includes sector-specific mitigation recommendations and notes an accelerated target-list update cadence.