Russian military intelligence hackers likely behind December cyberattacks on Polish energy targets, researchers say
· CNA · JoinRead a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST
Jan 23 : A notorious Russian military intelligence hacking unit with a track record of destructive cyber operations was likely behind the large cyberattacks that targeted Poland’s power system in late December, researchers said Friday.
Researchers with Slovakia-based ESET analyzed malware used during the attack and determined that it was the work of the hacking unit, tracked widely as Sandworm, based on how the group has operated in the past and code overlaps with other destructive cyberattacks carried out by the group over the years, the researchers said in a blog post.
The Russian Embassy in Washington did not immediately respond to a request for comment.
The hackers attempted to deploy a piece of malware dubbed DynoWiper that would have destroyed files on targeted computer systems and rendered them inoperable, according to the researchers.
Subscribe to our Chief Editor’s Week in Review
Our chief editor shares analysis and picks of the week's biggest news every Saturday.
This service is not intended for persons residing in the E.U. By clicking subscribe, I agree to receive news updates and promotional material from Mediacorp and Mediacorp’s partners.
Loading
“We’re not aware of any successful disruption occurring as a result of this attack,” the researchers said, echoing Polish Prime Minister Donald Tusk’s January 15 claim that the attacks were unsuccessful.
Milosz Motyka, Poland’s energy minister, told reporters January 13 that the cyberattack on the country’s power system in the final week of December was the strongest attack on the energy infrastructure in years.
Sandworm, which has been attributed to Russian military intelligence by the U.S. and British governments, has been linked to a string of high-profile and destructive cyber attacks dating back more than a decade. The December attack on Poland occurred on the tenth anniversary of the Sandworm-linked destructive malware attack on the Ukrainian power grid, “which resulted in the first-ever malware-facilitated blackout,” the ESET researchers said Friday.
Newsletter
Week in Review
Subscribe to our Chief Editor’s Week in Review
Our chief editor shares analysis and picks of the week's biggest news every Saturday.
Sign up for our newsletters
Get our pick of top stories and thought-provoking articles in your inbox
Get the CNA app
Stay updated with notifications for breaking news and our best stories
Get WhatsApp alerts
Join our channel for the top reads for the day on your preferred chat app