7 months ago
Poland Blames Russian FSB for Cyberattacks on Energy Infrastructure
Polish officials say that hackers from Russia's FSB spy agency attacked important energy places in Poland on December 29.
These attacks were meant to destroy data, but security software stopped them.
The attacks happened during a cold and snowy time, which made them even more serious.
Some experts think the hackers are part of a group called Berserk Bear or Dragonfly.
Another group, ESET, thinks the attacks might be from a different Russian hacking group called Sandworm.
These attacks are worrying because they show that the hackers might now want to cause damage, not just spy.
This makes people concerned about the safety of the upcoming Winter Olympics.
Polish officials blame Russian FSB hackers for cyberattacks on 30 renewable energy facilities, a manufacturing firm, and a heat plant on December 29, 2023.
The attacks coincided with low temperatures and snowstorms in Poland, exacerbating the impact.
The malware used in the attacks has overlaps with prior Russian cyber operations, but different groups are suspected by Polish officials and ESET.
The attacks were meant to irreversibly destroy data, but security software blocked the data destruction part.
Experts are concerned about the escalation from espionage to damaging actions, raising worries about the security of the upcoming Winter Olympics.
- Who
- Polish officials and cybersecurity experts
- What
- Cyberattacks on Polish energy infrastructure
- Where
- Poland, targeting 30 renewable energy facilities, a manufacturing firm, and a heat plant
- When
- December 29, 2023, during low temperatures and snowstorms
- Why
- To irreversibly destroy data, though the motive is not explicitly stated
Key facts
- Date of Attacks
- December 29, 2023
- Targeted Facilities
- 30 renewable energy facilities, a manufacturing firm, and a heat plant
- Suspected Hackers
- Russian FSB's hacking group, Berserk Bear/Dragonfly
- Malware Used
- Malware with overlaps to prior Russian cyber operations
- Impact
- Attempted data destruction, blocked by security software
- Timing
- During low temperatures and snowstorms in Poland
- Winter Olympics Concern
- Potential threat to event security
Quotes
Poland’s Computer Emergency Response Team report
Poland’s official cybersecurity response team
“It is worth noting that this period coincided with low temperatures and snowstorms affecting Poland, shortly before New Year’s Eve.”
theprint.in
“The hacks were 'purely destructive in nature'.”
theprint.in
John Hultquist
Chief analyst at Google Threat Intelligence Group
“They have the means, the question was always did they have the motivation. Now, potentially based on this attribution, proven to us that they do have the motivation, which puts us in a much more serious situation.”
theprint.in
“Russia has previously attempted to knock the opening ceremonies of the Winter Olympics offline, and they were extremely active during the last summer games. Disruptive cyberattacks are a very real threat.”
theprint.in