\n
<\/p>\n
BUCHAREST: A hacking group linked to Russia\u2019s FSB security service staged a cyberattack on a Romanian government organization last year, the country\u2019s intelligence agency said on Wednesday.<\/p>\n
Russia\u2019s embassy in Romania did not immediately respond to a request for comment.<\/p>\n
Romania, a European Union and NATO member, shares a land border of more than 600 km (370 miles) with Ukraine, and centrist President Nicusor Dan has said it is the target of a hybrid war waged by Russia to destabilize nations that support Kyiv.<\/p>\n
The attacks have ranged from drone incursions into Romanian airspace to cyberattacks, disinformation campaigns, acts of sabotage and attacks on cargo vessels near Romanian waters, Dan has said. Russia has repeatedly denied accusations that it is waging hybrid war against European states.<\/p>\n
Russian-linked APT hacking group Turla was behind the December 2025 cyberattack, Romania\u2019s intelligence agency SRI said, adding that it had \u201cimplemented measures to counter the attack and remedy its effects.\u201d<\/p>\n
\u201cThe attackers exploited a series of systemic vulnerabilities in Microsoft operating systems, but the attack was stopped after the National Cyberint Center intervened,\u201d SRI said in a statement.<\/p>\n
\u201cNo exfiltration of sensitive data was identified, and the affected email service has been fixed,\u201d it added, without identifying the government organization that was targeted. Cybersecurity firm ESET said on Tuesday that Turla had targeted the unnamed Romanian state institution by using previously undocumented malware designed to identify emails sent or received from NATO and the EU.<\/p>\n
SRI said it had cooperated with EU and NATO partners in this case.<\/p>\n<\/div>\n