A failed cyberattack targeting Poland's energy grid in late December was attributed to Russian government hackers by cybersecurity firm ESET, which investigated the incident. The attack, which occurred on December 29 and 30, targeted two heat and power plants and attempted to disrupt communication links between renewable installations and power distribution operators, according to Polish Energy Minister Milosz Motyka.
Motyka described the incident as the most significant attack on Poland's energy infrastructure in recent years, with the Polish government placing blame on Moscow. Local media reports indicated that the attacks had the potential to cut off heat and power to at least 500,000 homes across the country.
ESET reported on Friday that it had obtained a copy of the destructive malware used in the attack, which it named DynoWiper. This type of malware, known as wiper malware, is designed to permanently destroy data on computers, rendering them inoperable. ESET assessed with medium confidence that the malware was deployed by Sandworm, a hacking group believed to be a unit within Russia's military intelligence agency, the GRU. Sandworm has been linked to previous cyberattacks targeting energy infrastructure.
The Polish government has not yet released specific details regarding its response to the attempted cyberattack. However, officials have stated that they are taking steps to bolster the country's cybersecurity defenses and protect critical infrastructure. The incident highlights ongoing concerns about the vulnerability of energy grids to cyberattacks and the potential for state-sponsored actors to disrupt essential services.
Discussion
Join the conversation
Be the first to comment