cross-posted from: https://scribe.disroot.org/post/10951668
A pro-Russian hacker group on Wednesday claimed responsibility for a cyberattack that has affected multiple Norwegian government digital services over the past three days.
The cyberattack has been ongoing since Monday, said Are Kvistad, a spokesperson for the Norwegian Digitalization Agency (Digdir), the state body in charge of making Norway’s public services more digital and user-friendly, told The Associated Press.
“It’s the biggest attack against Digdir solutions that we have ever experienced,” Kvistad said.
The denial-of-service attacks meant that hackers pushed massive traffic toward the agency in order to block services, including one that enables citizens to use one login across multiple public services.
However, the Digdir spokesman said that the agency managed to keep the services running “practically all the time.”
…
Meanwhile, the UK Government reported that Russia has established a Special Activity Service (SSD) incorporating Russia’s military intelligence agency (GRU) Unit 29155, tasked with conducting operations against the West using a hybrid toolkit including sabotage, assassination, and cyberattacks.
…
Maybe return the favor?
The EU has pretty advanced cyber capabilities, but we somehow lack the will and/or capability to respond with a massive DDoS of our own?
Ddos != Hack
Don’t worry, it’s just a hybrid attack, it’s not like we’re at war or anything
this is the real story https://www.nrk.no/stor-oslo/frykter-for-tilliten-til-helsetjenestene-etter-datainnbruddet-i-lorenskog-1.17981989
(7 days ago) tldr; hackers stole patient data, asked for money. ransom didnt get paid and they leaked highly sensetive psych patient data to data brokers. OPs article seems is unrelated. I reckon russia just taking the chance to spread fearmongering with simple ddos
It was not stated here who was behind the attack, only that the attack found place. Are the two stories connected? Attacks happen all the time after all, so it’s hard to tell.
My point was - they are likely not related
DDOS attack (OPs article) are easy - anyone can do it. It only leaves the service temporarily unavailable. The previous breach however more sophisticated - they stole sensitive data. OPs article describes russian script kiddies trying to get in the spotlight in the outcome the original breach.
Oh no they took some websites down/made them run slow, this would probably be an issue in the UK/US, but are any of the affected services not easily accessible by going in person?
