Since last year, some institutions in the Czech Republic have been the target of cyber attacks exploiting a previously unknown vulnerability in the email client from Microsoft. The manner of the attacks and their focus correspond to the hacking and espionage group APT28 linked to the Russian military intelligence GRU. This was announced by the Czech Ministry of Foreign Affairs, referring to information from intelligence services. Minister of the Interior Vít Rakušan said that there are dozens of attacks on infrastructure by Russia.
The Czech Republic and its international partners fundamentally condemned the activities of the APT28 group, which, according to the office, has been conducting a long-term cyberespionage campaign in European countries. “The Czech Republic is concerned about repeated cyber attacks by state actors. We are determined to strongly respond to this unacceptable behavior together with European and international partners,” the ministry said. At the same time, it called on the Russian Federation to stop these activities.
According to the authority, the affected entities received technical recommendations and an offer to cooperate on increasing security measures. The APT28 group was also involved in Operation Dying Ember, which was led by the United States in January. In February, Prime Minister Petr Fiala (ODS) informed about the involvement of the Czech Republic in the operation.
The hacking and espionage group APT28 is also known as Fancy Bear or Pawn Storm, according to media reports. The abbreviation APT stands for Advanced Persistent Threat.
Security firm CrowdStrike says it is likely linked to Russia’s GRU military intelligence agency. The British Foreign Office claims that the Fancy Bear group is funded directly by the Russian government. According to the media, Fancy Bear was behind previous cyber attacks on the German parliament, the French television station TV5Monde, the White House, NATO and other institutions. According to the Guardian, the group has also targeted Emmanuel Macron’s presidential campaign in the past.
According to Czech diplomacy, APT28 has a long-term focus on the Czech Republic. “In the context of the upcoming European elections, national elections in a number of European countries and the ongoing Russian aggression against Ukraine, these actions are particularly serious and condemnable,” the ministry said. According to the department, the Czech authorities will continue to strengthen the resilience of government institutions and the private sector.
The North Atlantic Council, NATO’s top body, expressed deep concern on Thursday night over increasing Russian cyber attacks. In the statement, he talks about threats to the security of alliance partners and among the specific countries that have become their target, he also mentions the Czech Republic, Germany and Poland.
Due to cyber attacks linked to Russia, Germany summoned the Russian ambassador to the country today. At the same time, it called on Moscow to stop such raids, government spokesman Wolfgang Büchner said. The Federal Ministry of the Interior said that the attacks were not only aimed at the ruling Social Democracy (SPD), but also at German firms in the fields of logistics, armaments, aviation and computer technology. Foreign Minister Annalena Baerbock said today that the APT28 group was behind last year’s hacker attack on the SPD.
Austrian: Attacks are in the high tens
Minister of the Interior Vít Rakušan (STAN) said on Friday that the Czech Republic has been recording increased Russian activities in the field of cyber-attacks and cyber-espionage for a long time and has registered dozens of attacks on infrastructure. According to him, however, the public will not learn about most threats because they are eliminated already in the beginning. The minister said this after a meeting with German Interior Minister Nancy Faeser.
Minister of the Interior Vít Rakušan. Photo: Michal Čižek
The Austrian confirmed that the cyberattacks are indeed caused by the Russian military intelligence GRU. “If we look at the Ministry of the Interior, various attacks on our components or on our systems as such are to varying degrees on a daily basis,” said the minister.
NÚKIB: The source of the cyberattacks is the Russian-controlled APT28
Czech analyzes according to the director of the National Office for Cyber and Information Security (NÚKIB) Lukáš Kintro clearly show that the source of cyber attacks against Czech state institutions is the Russian-controlled group APT28.
“Our national analyzes clearly point to the state-sponsored group APT28 as a source of cyber attacks and long-term harmful effects against Czech state institutions. Together with other security forces of the state and when compared with the findings of our foreign allies, we came to the same conclusions as Germany,” said Kintr.
Tags: Institutions Czech Republic attacked spies connected Russian military intelligence ministry announced
-
