[ad_1]
Polish Deputy Prime Minister Jarosław Kaczy Saysski said last week’s breach of the private email accounts of several Polish officials was carried out from servers located in the Russian Federation.
“After reading the information provided to me by the Internal Security Agency and the Military Counter-Intelligence Service, I inform you that the main Polish officials, ministers and deputies of various political options have been the subject of ‘a cyberattack,’ Kaczyński said in a statement. released today.
“The analysis of our services and the secret services of our allies allows us to clearly state that the cyberattack was carried out from the territory of the Russian Federation. Its scale and scope are wide.”
The Polish security service investigation is still ongoing and evidence of the email hacking incident is being collected.
“On Friday, Poland handed EU member states, the European Commission and the Council a document on the details of cyber attacks carried out in recent days,” an EU diplomat with knowledge of the situation told Politico. incident.
In total, more than 30 Polish MPs, government officials and journalists have been affected by the attacks that began last year in September.
“The operational and technical analysis carried out by the Polish national cybersecurity incident response teams confirmed that the infrastructure and modus operandi used in the cyber attacks were the same as those used by the Russian-sponsored entities,” added the European diplomat.
Emails from Polish officials stolen and leaked on Telegram
Today’s statement comes after Michał Dworczyk, the head of the Polish prime minister’s office, said on June 9 that unknown attackers had hacked his email account.
At the time, Polish media reported that emails from private mailboxes of government officials were stolen and leaked on a Telegram channel, according to Reuters.
“As part of the reports of hacking my email and my wife’s mailbox, as well as our social media accounts, the relevant utilities have been notified,” Dworczyk said in a statement.
“Currently, I cannot say when exactly my email account was successfully hacked, but I would like to stress once again that I have not used it to send information that could pose a security threat to the state, ”he added two days later.
Ongoing Russian cyber espionage activity
The Microsoft Threat Intelligence Center (MSTIC) said a month ago that the Russian-backed hackers behind the SolarWinds supply chain attack were now coordinating a large-scale phishing campaign targeting agencies. governments around the world.
“This wave of attacks has targeted around 3,000 email accounts in more than 150 different organizations,” MSTIC researchers revealed.
“While organizations in the United States have received the largest share of the attacks, the targeted victims cover at least 24 countries.”
The US government has also warned of continuing cyber-espionage attacks in April, attacks coordinated by the Russian Foreign Intelligence Service (SVR) (aka APT29).
SVR operators target both US and foreign organizations, focusing on government networks, think tanks and policy analysis organizations, and information technology companies.
[ad_2]
picture credit