Cyberattacks target Polish energy infrastructure and global firms

Experts from CERT Polska have revealed new details regarding a series of destructive cyberattacks against Poland's energy sector. These incidents, which occurred in late December 2025, targeted wind and solar farms, a large heating plant serving 500,000 customers, and a manufacturing firm. Authorities believe groups linked to the Russian FSB, such as "Berserk Bear," "Static Tundra," "Dragonfly," and "Ghost Blizzard," are responsible. A recent analysis also identified an attack on a smaller heating plant serving 50,000 people, where hackers disrupted automation systems, causing a steam turbine shutdown and interrupting the cogeneration process.

Separately, cybersecurity research has exposed a widespread campaign by North Korean hackers targeting global organizations. By using a tactic known as "Contagious Interview," hackers pose as recruiters offering high-paying software engineering jobs. Once candidates download ostensibly technical testing software, malware is installed on their machines. This method has reportedly affected 1,640 companies across 57 countries, including major entities like Boston Children’s Hospital, Oppo, and various financial institutions, helping to fund North Korea's weapons programs.