Germany has squarely accused Russian military agents of conducting a cyberespionage campaign against key political and industrial entities within its borders, with the NATO alliance and several European nations expressing solidarity in the wake of the allegations. The hacking targeted Chancellor Olaf Scholz’s Social Democratic Party (SPD) among other sensitive government and industrial sectors.
German Foreign Minister Annalena Baerbock announced the allegations during a news conference, attributing the cyberattacks to Russia’s GRU military intelligence unit. The sophisticated operation, which reportedly utilized a previously unknown vulnerability in Microsoft Outlook, accessed the email systems of the SPD party headquarters and continued over several months. “Russian state hackers attacked Germany in cyberspace,” Baerbock stated, emphasizing the severity of the situation by deeming it “absolutely intolerable and unacceptable” and suggesting that there would be repercussions, although she did not detail what these might entail.
The hacking campaign began as early as March 2022, a timeline that coincides with heightened tensions between Germany and Russia due to the latter’s invasion of Ukraine and the former’s subsequent support for Ukraine. Industrial targets, particularly those within the defense and aerospace sectors, were also compromised as part of the operation.
In a collaborative international effort led by the FBI, a botnet known as APT28 or Fancy Bear, used by the Russian hackers, was dismantled. This botnet constituted a network of compromised devices instrumental in the cyberespionage activities.
Repercussions for the cyberattacks are anticipated, especially in light of Germany’s statement about their unacceptability. The European Union, represented by its chief diplomat Josep Borrell, strongly condemned the cyberattacks, reaffirming its stance against such hostile acts in cyberspace, particularly as the EU prepares for elections in June. The bloc recalled sanctions previously imposed on individuals and entities associated with Fancy Bear for a 2015 cyberattack targeting the German parliament.
The scope of the cyberespionage campaign is expansive, with the Council of the EU and the Czech Foreign Ministry reporting similar incidents targeting Czech institutions. NATO highlighted that Fancy Bear’s activities extended beyond Germany, with other governmental entities, critical infrastructure operators, and entities across the Alliance, including in Lithuania, Poland, Slovakia, and Sweden, also experiencing cyberattacks.
NATO expressed its determination “to employ the necessary capabilities in order to deter, defend against and counter the full spectrum of cyberthreats,” including considering coordinated responses to this threat.
The Russian embassy in Berlin has dismissed the accusations as unfounded, characterizing them as “another unfriendly step aimed at inciting anti-Russian sentiments in Germany.” Despite Russia’s denial, the collective response from Germany, the EU, and NATO suggests a strong commitment to addressing cybersecurity threats and holding the perpetrators accountable.
Relevant articles:
– German foreign minister says Russia will face consequences for monthslong cyber espionage, The Associated Press, 05/04/2024
– Germany’s FM says Russia will face consequences for ‘intolerable’ cyberattack, Yahoo News UK, 05/03/2024