What is the link between the pro-Russian hackers of “Noname” and the “17 October Movement”? The investigations and the heightened threat. Putin: “Accusations are a sign of weakness”

Investigators described a possible coordinated plan linking affiliates of the “17 October Movement” with pro-Russian hacker groups. The reported objective was to cause maximum disruption on 24 October, both in Italian streets and online. Authorities viewed the threat as serious because the plan allegedly combined physical disorder with attacks on institutional targets.

Police stopped Youssef Siher shortly before he could publish meeting points for demonstrations in eight cities. Investigators said the protests could lead to disorder, violence, vandalism, and damage to shops, banks, private property, and institutions. On 23 October, Noname057(16) and Dark Storm Team announced support for demonstrations in Italy and France.

The article also mentions support messages from Bd Anonymous, a pro-Palestinian South Asian-Bengali crew. Telegram later banned the channels of the two pro-Russian groups. Vladimir Putin rejected accusations involving Russia, while analysts warned that hacker groups could reorganize and target police, defense bodies, or national infrastructure.

A distributed denial-of-service, or DDoS, attack tries to make an online service unavailable. Many devices or connections send requests to the same website at once. The service must process this flood, so its capacity is consumed. Ordinary visitors may then face very slow pages, errors, or complete inaccessibility.

The article describes DDoS as a system that saturates web addresses. It says Noname057(16) and related groups had previously used it against important Italian institutional websites. The key mechanism is not necessarily breaking into a server. Instead, the attackers overwhelm the service’s ability to respond to normal traffic.

A DDoS attack can interrupt public information, online services, or communication during a tense event. The article does not state that every group mentioned successfully attacked Italy on 24 October. It reports announced support, previous attacks, and investigators’ concern about possible future operations against institutions and infrastructure.

Investigators judged the threat elevated partly because the Instagram group connected with the movement had 32,000 followers. That figure indicates a substantial potential audience for calls to action, even though the article does not say how many followers would actually attend. The page had been opened by Youssef Siher.

Police stopped Siher shortly before he could announce the exact meeting points. The possible cities were Bologna, Milan, Turin, Genoa, Florence, Rome, Padua, and Bari. Investigators believed these locations could have been starting points for protests that might develop into disorder, violence, and property damage.

The planned network therefore combined broad online reach with a geographically distributed street presence. The article presents the eight-city plan as a reason for concern, not as proof that every planned event occurred. Telegram later banned channels associated with two hacker groups, while analysts continued monitoring the online protest environment.

The connection emerged from the groups’ online activity around the planned demonstrations. Investigators reconstructed a scenario in which movement affiliates prepared street actions while hacker groups publicly supported them. The timing mattered: messages appeared just before the planned 24 October protests, raising concern about a coordinated pressure campaign.

On 23 October, Noname057(16) and Dark Storm Team announced support for demonstrations in Italy and France. Investigators also identified messages from Bd Anonymous, which supports the pro-Palestinian cause and had previously used DDoS attacks against Italian institutions and organizations. These facts supplied the main links described in the article.

However, the article distinguishes support from offensive intent. Bd Anonymous reportedly posted support messages but showed no known intention to attack Italy. It also does not establish that all groups shared a formal leadership or operational plan. Telegram later banned the channels of the two pro-Russian groups.

If physical unrest and cyberattacks happened together, authorities would face two kinds of disruption at once. Protests could damage shops, banks, private property, and institutions. Cyberattacks could make websites or other digital systems difficult to use. The combination could complicate emergency response and reduce the ability of institutions to communicate.

The article says investigators feared disorder, violence, and vandalism in several cities. It also reports concern that hacker groups might target police, the Defense sector, or important national infrastructure, including roadside surveillance cameras. These targets could affect public security and the monitoring of events or traffic.

The article does not report that this full scenario occurred. It says the planned street activity was neutralized by security forces, at least regarding shop assaults and vandalism. Analysts nevertheless suspected that hacker groups could reorganize soon. Their concern was that a later operation might again combine online attacks with unrest or focus on security institutions.

Government websites, police systems, defense organizations, and traffic cameras are connected to public administration and security. Disrupting them during unrest could make information harder to publish, complicate coordination, or reduce visibility over events. Such targets may therefore have symbolic and practical importance when groups want to amplify pressure.

The article gives a concrete warning from analysts monitoring the protest’s online environment. They suspected hacker groups might reorganize and target the police and Defense, or try to hit nationally important infrastructure such as roadside surveillance cameras. Earlier, the article described DDoS attacks against institutional websites, where traffic saturation can prevent normal access.

These are analysts’ concerns, not a confirmed list of successful attacks on 24 October. The text does not identify a specific motive for each possible target. It does show why security specialists considered the threat elevated: physical protests could be followed or accompanied by attempts to disrupt institutions and surveillance systems.

Online hacktivist networks can connect people in different countries through public channels, posts, and shared causes. Groups may announce support, exchange visibility, or use similar tactics without having one formal leadership. This cross-border structure can make activity appear broader and can let separate communities react quickly to the same event.

The article illustrates this pattern through groups from different backgrounds. Noname057(16) and Dark Storm Team, described as pro-Russian, announced support for protests in Italy and France. Bd Anonymous, a South Asian-Bengali crew supporting the pro-Palestinian cause, also posted support. Its messages did not indicate offensive intentions toward Italy, according to investigators.

Shared political sympathy does not by itself prove a joint operation. In this case, investigators suspected links between street organizers and hacker groups, but the article provides different levels of evidence for each group. Telegram later banned the channels of the two pro-Russian groups, while analysts warned that hacker networks could reorganize.