While Germany and the Czech Republic summoned Russian ambassadors due to a large-scale cyber espionage campaign, the Slovak government has not publicly reported similar attacks on its own state institutions and critical infrastructure. Only after requests from journalists did the authorities confirm that the country had also been targeted by hackers linked to Russia's FSB (Federal Security Service).
These attacks were part of a wider operation that affected at least nine European Union countries. In Slovakia, targets included not only government systems but also companies in the defense and energy sectors.
Who Attacked Whom?
The cyberattacks were carried out by a group known as APT28 (also Fancy Bear), which Western intelligence agencies link to the Main Intelligence Directorate (GRU) of the Russian General Staff. However, recent EU data points to the involvement of the 16th center of the FSB, which coordinates the activities of several hacker groups, including Turla.
These groups specialize in long-term espionage and complex attacks. Their targets in Slovakia and other EU countries included:
- State institutions: ministries and agencies, aiming to steal confidential information.
- Critical infrastructure: energy companies and facilities, which could have led to serious disruptions in their operations.
- Defense sector: companies working in the arms industry.
Attacks were often carried out through phishing emails and by exploiting software vulnerabilities, such as those in Microsoft Office.
International Reaction and Slovakia's Position
The reaction to the exposure of the Russian cyber campaign in Europe was strong. Germany and France officially accused Russia and summoned ambassadors for explanations. The European Union and Great Britain imposed coordinated sanctions against nine individuals and four organizations involved in the attacks.
Against this background, Slovakia's position appeared reserved. The government did not make loud statements and did not inform the public about the incidents. Only after journalists from the TA3 portal made inquiries did the Ministry of Foreign Affairs confirm the attacks and condemn them, joining a joint EU statement.
Why Is This Serious?
Cyberattacks like these are part of hybrid warfare. Their goal is not just to steal data, but also to destabilize the situation in a country, sow uncertainty, and gain leverage in political decision-making. Attacks on critical infrastructure, such as power plants or water supply systems, can have direct consequences for the safety and daily lives of citizens.
The SK-CERT National Cyber Security Centre regularly publishes warnings about new threats and provides recommendations for government bodies and private companies on strengthening their defenses. Experts emphasize that in times of increasing tension, vigilance and adherence to basic cyber hygiene rules are critically important not only for large organizations but also for ordinary users.
