Romanian Intelligence Agency Identifies Russian Cyberattack on Government

Romania's intelligence agency, the Romanian Intelligence Service (SRI), has reported a significant cyberattack attributed to the Russian-linked hacking group Turla. This incident occurred in December 2025, targeting an unnamed government organization. According to the SRI, the attackers exploited vulnerabilities in Microsoft operating systems to gain access, but their efforts were thwarted by the National Cyberint Centre, which successfully mitigated the intrusion.

Officials from the SRI confirmed that there was no evidence of sensitive data being compromised during the attack. The affected email service has since been restored, ensuring that government operations could continue without disruption. This incident highlights the ongoing cybersecurity challenges faced by government entities in Romania and the broader region.

Cybersecurity firm ESET, which analyzed the attack, noted that the operation utilized previously undocumented malware. This malware was designed to identify emails related to NATO and the European Union, indicating a potential focus on sensitive governmental communications. The implications of such targeted attacks raise concerns about the security of critical infrastructure and the protection of national interests.

In response to this incident, Romanian officials emphasized their commitment to cybersecurity and the importance of international cooperation. The SRI stated that it has been working closely with EU and NATO partners to enhance defensive measures against cyber threats. This collaboration is crucial in an era where cyber warfare is increasingly used as a tool of geopolitical influence.

The Turla hacking group, known for its sophisticated cyber operations, has been linked to various attacks on government and military organizations across Europe. Their tactics often involve advanced persistent threats (APTs) that can evade traditional security measures. The recent attack on Romania serves as a reminder of the persistent threat posed by state-sponsored hacking groups and the need for robust cybersecurity strategies.

As the landscape of cyber threats continues to evolve, Romania's proactive stance in addressing these challenges is vital. The SRI's ability to detect and respond to such incidents will play a crucial role in safeguarding national security and maintaining the integrity of governmental operations.

Published by Banx Network. This article is part of the Banx decentralized media programme, powered by the BXE token on the XRP Ledger.