In a report prepared by the National Security Agency (NSM), it appears that Norway was hit by a cyber attack at the same time as Russia began its full-scale war in Ukraine.
Early in the morning of February 24, 2022, Vladimir Putin’s tanks rolled into Ukraine, and Russia attacked military targets in several places in the country.
ANTI-TANKS MINE: “Yuris” Humvee hits an anti-tank mine during an attack on Russian positions in the Mykolaiv region, November 8. Video: @nucking_futs_yuri. Reporter: Vegard Krüger. view more
Attacked an hour before the invasion
Just before that happened, a cyber attack was launched against the KA-SAT (Viasat) satellite network to paralyze the Ukrainian ability to communicate.
In its report “National digital risk picture 2022”, NSM writes about hitherto unknown details of the attack:
– Just one hour before Russian military units crossed the border into Ukraine on 24 February, the KA-SAT (Viasat) satellite network was hit by a cyber attack – probably to affect Ukrainian military communication capabilities.
Requests an urgent meeting of the Security Council
KA-SAT offers internet via satellite in Europe and around the Mediterranean. Individuals and businesses across Europe, and especially in Ukraine, lost internet access.
– In Norway, meteorologists on Hopen (Svalbard) and Bjørnøya lost internet, telephone, radio and TV for two weeks as a result of the cyber attack.
When the report came out, this cyber attack on KA-SAT was the most serious in terms of accidental spread to other countries.
BOMBED: A man sits outside what was his home until the Russians started bombing. The picture is from eastern Ukraine from the first day of the war, 24 February 2022. Photo: AFP/NTB. view more
In Germany, the energy company Enercon immediately lost contact with 5,800 wind turbines, and around 30,000 satellite terminals across Europe used by companies and organizations from various sectors were affected by the attack.
Associated with Russia
Both the US, the UK and the EU have linked the cyber attack on Viasat to Russia. This is revealed in an EU report which plainly condemns the action, and states that the Russian attack could put residents throughout Europe at risk.
The Meteorological Institute (MET) only discovered the attack when they arrived at work at Værvarslinga in the morning.
– The internet connection to both Bjørnøya and Hopen suddenly disappeared the night when Russia entered Ukraine. We got a little warm around the ears when it became completely quiet, but we quickly established a simple contact with the weather stations via satellite phone, says Bård Fjukstad, who is Director of Weather Forecasting at MET.
THE FRAMEWORK: Hopen meteorological station. Photo: Geir Inge Jensen/NRRL. view more
The work to set up an alternative communication was started as quickly as possible. The only way they could make contact with the stations was by satellite phone.
– These satellite phones are not always as stable in the Arctic regions, and we tried to make other systems work. With a war in Europe, they lost television, radio and the internet, which was not entirely unproblematic given the situation, he says.
– It died physically
It turned out that the cyber attack had completely knocked out the modems.
– They actually killed the modem, it died physically and everything was dark. It really surprised me, says Fjukstad.
HOPEN: The old faulty antenna has been taken down and a new one is being put up. Photo: Geir Inge Jensen/NRRL. view more
The employees at Værvarslinga were in a hurry to get all the systems working again. Although there are not many people on Bjørnøya itself and in Hopen, they provide information that can be vital for traffic and human life in the Barents Sea.
– We provide important weather data, especially for the search and rescue service. There are important meteorological observations, and it is urgent for the search and rescue service. We are an essential part of the security infrastructure in this area, says Bård Fjukstad.
CHANGED THE COURSE: Ukrainian President Volodymyr Zelenskyy says HIMARS is changing the course of the war against Russia. Video: AP / Reuters / Twitter / Dagbladet TV. Reporter: Vegard Krüger. view more
Could have gone with human life
If a situation involving a rescue helicopter had arisen, it could have been very serious.
– Yes, I would say that. It is correct to say that if the weather observations fall away over a longer period, then it is a very unfavorable situation for search and rescue work. Then, in the extreme, it could have cost human life, says Fjukstad.
Criticizes Zelenskyj: – Went way too far
Once they were able to establish a connection by e-mail, they had the option of sending out information to the rescue helicopters should a situation arise.
Increased sanctions against Russia
After this attack, NSM went out and warned Norwegian businesses about possible Russian data attacks in April 2022.
– This warning was not a consequence of the incident, but generally due to increased sanctions against Russia and an escalation in the war, and a reminder that this can also have ripple effects in Norway and for Norwegian businesses, says Gullik Gundersen, deputy director of the National Cyber Security Center in NSM.
He points out that the NSM must notify of incidents and provide advice and measures to businesses so that they can build the best possible preparedness, close any vulnerabilities, and be prepared for the fact that cyber attacks can also affect them.
– In that respect, this example is an important reminder of precisely this, says Gundersen.
REPRODUCIBLE: Temperatures were high during the UN Security Council on Friday, when a draft resolution against Russia was on the agenda. view more
Malicious attacks
At the same time, the United States, Great Britain, Australia, Canada and New Zealand issued a joint warning that the war in Ukraine entails an increased risk of malicious attacks against critical infrastructure.
Subsequently, there have been a number of cyber attacks against Norwegian interests. Equinor was exposed to a computer attack in the summer of 2022, and it became known that the oil fund is exposed to three serious computer attacks daily. SAS, Hurtigruten, several Norwegian municipalities and twelve Norwegian ministries were exposed to attacks.
From April to July this year, hackers had access to a computer platform used by the government, so that they could obtain information, according to a report prepared by the National Security Agency (NSM) in collaboration with US security authorities.
The report has been prepared by the National Security Agency (NSM) in collaboration with US security authorities.
The drones choose who will die
– The biggest threat
When the Norwegian security authorities presented the threat picture for 2023, they warned that a worsening relationship between Norway and Russia would make them the biggest intelligence threat to Norway in 2023.
– Russia today poses the biggest threat to Norwegian and European security, and the confrontation with the West will be long-lasting, Defense Minister Bjørn Arild Gram stated when the report was presented.
PST manager Beate Gangås followed up with the following statement:
– Relations between Norway and Russia have worsened. We meet in fewer arenas than before, and the Russians have lost access to sources.
Because of the poor relationship, Russia has less to lose if their intelligence activities in Norway are revealed. The war in Ukraine has changed and increased Russia’s need for information about military capabilities in Norway, and about NATO expansion in the Nordic region when Sweden and Finland join.
– As Norway is a member of NATO, Norwegian and allied activity and presence in Norway are persistently important intelligence targets for Russia, writes PST in the report – where Svalbard and the northern areas are mentioned as particularly strategically important for Russia.
Here, Norwegian-donated drones are in use at the front in Ukraine. Video: Veteran Aid Ukraine. Reporter: Vegard Krüger / Dagbladet TV. view more
At one point there was a discussion that the weather stations on Hopen and Bjørnøya should be automated to save money. It caused many and strong reactions.
– We have received extra funds from the ministry to run the station at Hopen, precisely because it is so important for search and rescue. When it was previously discussed to automate the weather station, we received a lot of clear feedback on the importance of these stations, says Bård Fjukstad.
2023-11-08 22:08:42
#Report #Russian #cyber #attack #hit #Norway
