Russia's Aggressive Moves Against Germany Already Underway
By Volker Petersen
Germany isn't just facing military aggression from Russia like Ukraine. A contemporary Cold War-style battle is brewing, with Russia employing covert operations such as espionage, sabotage, and cyber warfare to weaken Germany, as revealed in recent reports.
Last summer in Leipzig, a package mysteriously caught fire at the airport, narrowly avoided air freight to London and only exploded in a container due to a fortunate delay. Firefighting efforts took hours. The Federal Public Prosecutor's Office is currently investigating, with reports suggesting that the Russian military intelligence service GRU was behind the explosion—a possible act of sabotage. This wasn't an isolated incident: packages also caught fire in Birmingham and Warsaw.
Economic Instability and Cyber Threats
The incident sheds light on Russia's attacks against Germany. Unlike traditional military attacks, these involve sabotage, espionage, and cyber attacks. According to the new domestic intelligence report, the Russians are aggressive and unselective, with German politics always in their crosshairs. The internet, offering them an ideal playground for Russian hackers and cybercriminals working undercover for the intelligence agency, becomes a battleground for German data.
"The situation is tense," said Claudia Plattner of the Federal Office for Information Security (BSI) at a federal press conference. Alongside her, Michael Fubi from TÜV Rheinland presented a study on the cybersecurity of German companies. Ransomware attacks are the biggest issue, although not necessarily the most urgent, Plattner noted. State actors engaged in espionage and sabotage pose a significant concern, with Russia, China, Iran, and Turkey being particularly active, according to the domestic intelligence report.
Political Targeting
Russia can reap spectacular successes in the cyber realm. In 2015, Russian hackers attacked the Bundestag, and in 2023, the SPD. The attack was attributed to the cyber group APT 28, also known as "Fancy Bear" or "Sofacy". APT 28 is linked to the GRU. In 2024, the CDU became the victim of a cyber attack, with Russia quickly suspected.
Disinformation and Propaganda
In the network, Russia doesn't just steal data but also spreads propaganda and disinformation. The messaging service Telegram plays a crucial role in this regard. The case of "Voice of Europe" caught attention. Disguised as a genuine news portal, "The Voice of Europe" initially propagates pro-Russian positions, particularly on the Ukraine war, from the Netherlands, later from Prague. However, activities appear to be more extensive. Before the 2024 European elections, politicians of right-wing parties in Europe received money from Russia, potentially including Petr Bystrom, an AfD member of the Bundestag who ran for the European Parliament and made multiple appearances on "Voice of Europe".
The targets of these cyberattacks aren't limited to political parties and propaganda spread online. Companies of interest to Russia, such as those from the defense industry, are also targeted. Apparently innocuous ransomware attacks serve the agenda of intelligence agencies. When cybercriminals paralyze a company's IT and demand a ransom, the costs for the victim can be enormous.
In a new study by TÜV Rheinland, it was found that 15 percent of the companies surveyed had experienced a cyberattack in the past 12 months, representing an increase of four percent compared to 2023. Unfortunately, the millions of intercepted and failed phishing attempts were not included in these statistics.
Investments in IT security are significant and more cost-effective than dealing with the aftermath of a successful cyberattack. FUBI advises small companies to outsource their data to a commercially operated cloud, whose operator ensures IT security. FUBI and Plattner urge the federal government to quickly implement the EU directive "Network and Information Security" (NIS 2), aiming at harmonizing and improving cybersecurity across Europe, especially for critical infrastructure. They also advocate for the government to clarify who is responsible for cybersecurity matters—the new digital ministry or the interior ministry. The topic of artificial intelligence will be crucial—for both attackers and defenders.
Interior Minister Alexander Dobrindt has pledged action. "As interior minister, I want to ensure that the security authorities are capable of fending off such attacks," he told Funke media group newspapers. "We must upgrade technologically, legally, and organizationally in Germany." Artificial intelligence will play a decisive role in this endeavor, with Dobrindt promising substantial funding for its application in intelligence services. The future remains uncertain, but one thing is clear: another attack from Russia is imminent.
Sources:
- ntv.de
- The New York Times
- The Guardian
- Deutsche Welle
- BBC News
- The Commission has also adopted a communication on the future of the European Union, emphasizing the need for enhanced cybersecurity measures in light of the escalating cyber warfare tactics employed by countries like Russia.
- Amid increasing cyber threats, German politics, economy, and general news outlets are becoming prime targets for Russian hackers and cybercriminals working undercover for the intelligence agency. This is putting the integrity of data and political stability at risk.
- As cyber warfare continues to evolve, Russian agencies are not only stealing data but also spreading propaganda and disinformation through platforms like Telegram, aiming to influence politics, justice, and public opinion across multiple countries, including Germany.
