Who is suspected of being behind the cyberattacks on Polish energy facilities?

Polish officials suspect Russia's Federal Security Service (FSB) was responsible for the cyberattacks.

What was the apparent goal of the cyberattacks on Poland's energy infrastructure?

The cyberattacks were purely destructive in nature, aiming to irreversibly destroy data stored on devices within the combined heat and power plant.

How does this cyberattack compare to previous Russian operations?

This incident is considered the worst of its kind in years and represents a potential escalation from espionage to destructive cyber activity by Russian hacking groups.

Home / Technology / Russia Blamed for Destructive Cyberattack on Polish Energy Plants

Russia Blamed for Destructive Cyberattack on Polish Energy Plants

31 Jan

•

Summary

Polish officials suspect Russia's FSB behind cyberattacks on energy facilities.
The attack coincided with cold weather, aiming to destroy data.
This incident marks a shift from espionage to destructive cyber activity.

Russia Blamed for Destructive Cyberattack on Polish Energy Plants

Polish authorities have attributed a significant cyberattack, occurring late last month, to Russia's Federal Security Service (FSB). The attack targeted 30 renewable energy facilities and a manufacturing firm, impacting a plant that supplies heat to nearly 500,000 customers. This incident, described as the worst of its kind in years, coincided with severe cold weather and snowstorms across Poland.

The FSB's operation, tracked under various names including 'Berserk Bear,' aimed to irrevocably destroy data within the combined heat and power plant. Fortunately, security software prevented the destructive portion of the attack. While independent analysis by ESET suggests a link to Russian military intelligence via the 'Sandworm' group, Poland's report specifically identifies the FSB.