EU and UK officially blame Russian spies for cyberattack on Poland's power grid
International community points finger at FSB for winter energy grid disruption attempt.
1The actors behind the attack
The EU and UK have formally attributed the December 2025 cyberattack on Poland's power grid to Russia's Federal Security Service (FSB). The attack, carried out by FSB's Centre 16 unit, was described as another attempt to sow chaos across Europe. Polish Energy Minister Milosz Motyka confirmed the attack targeted communication between renewable energy hardware and distribution operators.
2The failed attack method
Attackers attempted to deploy DynoWiper malware, commonly associated with Russian state-backed operations. Similar malware was used by Sandworm group in Ukraine's 2023 blackouts. Though unsuccessful, the Poland attack risked leaving half a million without power in midwinter. The UK NCSC declined to share evidence linking the attack to FSB.
3Sectors at highest risk
The UK National Cyber Security Centre (NCSC) published an advisory highlighting Russia's evolving cyber tactics. Communications, defense, energy, finance, and healthcare sectors were identified as most vulnerable. Recommendations included disabling SNMPv1/v2 in favor of encrypted SNMPv3 and turning off Cisco Smart Install features.
4Russia's cyber playbook
Centre 16 commonly scans for devices using SNMPv1/2 protocols to gain network access. The NCSC had warned about this tactic in April. Overlapping techniques with other Russia-aligned groups suggest coordinated operations. NCSC director Jonathon Ellison urged immediate implementation of defensive measures.
5New sanctions imposed
The UK and EU announced sanctions against GRU officials, cybercriminals, and hacktivists. Pro-Kremlin Rybar media members were targeted for disinformation. GRU leaders Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko were accused of orchestrating cyber operations. UK Foreign Secretary Yvette Cooper stated Russia can't hide behind proxy groups.
6Global security alarm
Dutch warnings about Russian spies targeting internet-connected cameras added to international concerns. Russia's cyber campaigns continue threatening European security. The UK and EU reaffirmed support for Ukraine. Critical infrastructure protection measures will be crucial in preventing future attacks. Cybersecurity experts urge organizations to implement defenses immediately.