Cyberattacks on Polish energy infrastructure

Overview

Cyberattacks have targeted Poland’s energy infrastructure, specifically targeting wind and solar farms, manufacturing firms, and heating plants. Experts from CERT Polska have linked these destructive incidents to groups believed to be associated with the Russian FSB, including “Berserk Bear,” “Static Tundra,” “Dragonfly,” and “Ghost Blizzard.”

Technical investigations into a breach at a combined heat and power (CHP) plant serving approximately 50,000 residents revealed that attackers exploited a private Access Point Name (APN) within a mobile telecommunications network. This exploit allowed intruders to bypass traditional internet-based defenses and pivot into operational technology (OT), industrial control systems (ICS), and SCADA networks. The breach resulted in the shutdown of a steam turbine and process water treatment systems.

Security experts noted that the attackers remained active within the network during restoration efforts, highlighting a vulnerability in the perceived isolation of carrier-provisioned private networks.

Entities

Poland · CERT Polska · FSB · Microsoft · North Korea

Timeline

1 day ago

[TECHNOLOGY] 4 sources
Polish power plant compromised via private mobile APN exploit
Attackers breached a Polish power plant by exploiting private mobile APNs to access industrial control systems, marking a novel attack vector against critical energy infrastructure.
2 days ago

[TECHNOLOGY] 6 sources
Cyberattacks target Polish energy infrastructure and global firms
Cybersecurity reports highlight major threats: Russian-linked groups targeted Polish energy infrastructure to cause blackouts, while North Korean hackers use fake job interviews to infiltrate global firms.

Sources

centrulslavici.uvvg.ro · countryrebel.com · dev.to · elenastil.com · eyehealthweb.com · flagthis.com · it-boltwise.de · singaporeanmalaysianrecipes.com · therecord.media