Russian hackers likely behind December attack on Poland's energy sector

Security researchers link a large-scale cyberattack on Poland's energy infrastructure at the end of December to the notorious Russian hacking group Sandworm, linked to the Russian military intelligence service GRU. According to Polish authorities, the attack was the strongest the country's energy sector has faced in recent years — yet it was repelled.

Analysis points to Sandworm

The disclosure was made by analysts at ESET, who examined the malware used during the incident. Based on matches in code, techniques and historical patterns of behavior, they concluded that the attack was very likely carried out by the Sandworm group — an actor known for its destructive operations against critical infrastructure.