Russian hackers ramp up cyberattacks to obstruct European societies

Russian hackers are operating increasingly brazenly and aggressively to obtain vital information and disrupt Dutch and other European societies.

The Dutch Military Intelligence and Security Service (MIVD) uncovered numerous operations conducted by Russian hackers in the Netherlands last year.

For example, during a covert Russian cyber operation, hackers tried to disable the digital operating system of a public facility. This was the first time the Russians tried to sabotage a public facility in the Netherlands. The MIVD doesn’t share any details about this specific incident.

“The unrest in the world and the threat picture for the Netherlands and the rest of Europe are worrisome. The security of the Netherlands, our prosperity, and our way of life are under pressure,” MIVD Director Peter Reesink says in the intelligence agency’s 2024 Year Review report.

The increasing threat of Russian hackers not only impacts the Netherlands, but Europe and the rest of the world as well. Even if we’re able to put a stop to the war in Ukraine, we shouldn’t let our guard down.

“This underlines the importance for the Netherlands, NATO, and in particular for the European member states, to expand military capacity as soon as possible. This is necessary to deter Russia and, in the worst case, to be able to defend the Netherlands and Europe against an attack by Russia,” Reesink says in the MIVD’s report.

According to the MIVD, the Netherlands is and will remain an interesting target for Russia. This is due to the role the Netherlands plays in supporting Ukraine and because the Netherlands is home to international organizations, such as the International Criminal Court (ICC) and the Organization for the Prohibition of Chemical Weapons (OPCW), and major tech companies like ASML.

State-sponsored hackers from Russia not only try to sabotage public services, civil society, and the digital infrastructure in the Netherlands. They are also mapping the infrastructure of the North Sea and preparing activities for espionage and sabotage. According to the MIVD, actual disruptions can lead to major damage and disruption in the Netherlands, Europe, and the rest of the world.

The military intelligence and security agency also warns to look out for China. Because of the advanced level of the Dutch defense industry, the Netherlands is an interesting target for China “to fulfill its stated political, economic, and military objectives.”

The MIVD has observed the unwanted transfer of knowledge of advanced Dutch technology, such as semiconductors. This was done openly through acquisition, investment, and participation in scientific research, but also illegally with evasion of export restrictions and cyber espionage.

Lastly, the MIVD mentions that American intelligence and security services discovered a covert cyber operation carried out by a Chinese hacking group called Salt Typhoon. This specific threat actor was able to access sensitive and confidential information that was processed by American internet service providers.

The MIVD estimates that European telecommunications providers are also likely to be targeted by advanced hacking attempts carried out by Chinese hackers.