Romanian intelligence agency says it identified Russian-linked cyberattack

Romanian intelligence agency says it identified Russian-linked cyberattack

Romania’s intelligence agency reported a cyberattack by a Russian-linked hacking group on a government organization. The attack is associated with Russia’s FSB security service.

BUCHAREST: A hacking group linked to Russia’s FSB security service staged a cyberattack on a Romanian government organization last year, the country’s intelligence agency said on Wednesday.

Russia’s embassy in Romania did not immediately respond to a request for comment.

Romania, a European Union and NATO member, shares a land border of more than 600 km (370 miles) with Ukraine, and centrist President Nicusor Dan has said it is the target of a hybrid war waged by Russia to destabilize nations that support Kyiv.

The attacks have ranged from drone incursions into Romanian airspace to cyberattacks, disinformation campaigns, acts of sabotage and attacks on cargo vessels near Romanian waters, Dan has said. Russia has repeatedly denied accusations that it is waging hybrid war against European states.

Russian-linked APT hacking group Turla was behind the December 2025 cyberattack, Romania’s intelligence agency SRI said, adding that it had “implemented measures to counter the attack and remedy its effects.”

“The attackers exploited a series of systemic vulnerabilities in Microsoft operating systems, but the attack was stopped after the National Cyberint Center intervened,” SRI said in a statement.

“No exfiltration of sensitive data was identified, and the affected email service has been fixed,” it added, without identifying the government organization that was targeted.

In brief

BUCHAREST: A hacking group linked to Russia’s FSB security service staged a cyberattack on a Romanian government organization last year, the country’s intelligence agency said on Wednesday. Russian-linked APT hacking group Turla was behind the December 2025 cyberattack, Romania’s intelligence agency SRI said, adding that it had “implemented measures to counter the attack and remedy its effects.

This is the opening of the story, shared with credit to Arab News. The rest of the report — with every detail — continues on the publisher’s website.

Continue reading at Arab News ↗

Cookie settings

Choose which cookies we may use. You can change this at any time from Cookie settings in the footer. Details of each cookie are in the Cookie Policy.

Strictly necessary

Needed for sign-in, security, payments and remembering these choices. Always on.

Preferences

Remember settings such as dark mode.

Analytics & performance

Help us count visits, understand which pages, devices and countries our readers use, and measure how well the site performs – anonymous and aggregated.

Advertising & marketing

Lets advertising partners show and personalise adverts, measure impressions, clicks and visits, prevent ad fraud and pay us – this is how the free site is funded.

🔔 News notifications

Get headlines from NewsHub on this device — even when the site is closed.

You can switch this off at any time. Works on Android, Windows, Mac and Linux browsers; on iPhone/iPad add the site to your Home Screen first.