Signal
Submitted
Feb 13, 2026, 19:25 UTC
In May 2024, Russian hacker group Fancy Bear (APT28) launched a large-scale malware campaign targeting Polish government bodies, confirmed by Polish cyber authorities.
The Russian hacking group Fancy Bear, linked to the GRU, targeted Polish government institutions in May 2024 with a sophisticated malware campaign delivered via phishing emails that centered on a fabricated story of a Ukrainian woman connected to high-ranking officials. The campaign was detected and publicly confirmed by NASK and the Polish defence ministry's cyber response teams. Polish digital affairs minister Krzysztof Gawkowski highlighted the similarity of these attacks to those faced by Ukraine, underscoring an ongoing cyber cold war between Russia and Poland. While specific targeted entities and breach results remain undisclosed, this operation fits a pattern of Russian cyber espionage activities against Western governmental targets, exacerbating cybersecurity challenges for Poland amid regional tensions.
Confidence: High
The article clearly describes a hostile cyber espionage campaign attributed to Russian actors (Fancy Bear/APT28 linked to the GRU) targeting Polish government bodies, confirmed by Polish cyber authorities.
Source URL
https://notesfrompoland.com/2024/05/09/russian-hackers-target-polish-government-bodies
Source reliability
C
Info credibility
4
Event time
May 8, 2024, 00:00 UTC
Event time confidence
unknown
Location
Warsaw
Primary actor
Fancy Bear (APT28)
Country
Poland
Countries
Poland
Tags
Fancy Bear, APT28, Russian cyber espionage, Polish government, malware campaign, phishing, GRU, cyber cold war, NASK, Krzysztof Gawkowski
Nodes
Node 1: Borders