Spain Under DDoS Barrage: Weekly DDoS Threat Intelligence Analysis

SOCRadar observed an intensive, week‑long coordinated DDoS campaign (Feb 16–23, 2026) conducted by pro‑Russian hacktivist NoName057(16) using the DDoSia framework; the operation generated 8,044 recorded attack entries against 167 domains/180 IPs, concentrating on Spain (49.4%) and targeting government, transport, energy, and defense sectors with multi‑vector techniques (HTTP GET/POST, TCP SYN, nginx_loris, UDP) and frequent real‑time target list updates — the report includes sectored impact analysis and concrete mitigation recommendations.