Wave of Cyberattacks and Bomb Threats Disrupts European Infrastructure
Coordinated threats targeting media, aviation, and retail systems trigger widespread security investigations across Europe.
1Coordinated Disruption Across Europe
A series of security incidents disrupted European infrastructure throughout the week, including bomb threats against flights and cyberattacks on retail refrigeration systems. Media organizations in Ireland and the UK received threatening emails on Friday, while aviation authorities reported widespread flight diversions. Officials are currently investigating whether these events represent a coordinated campaign.
2Retail Refrigeration Systems Compromised
On Monday, cyberattacks targeted refrigeration controllers in supermarkets across eight European countries, including 13 SuperValu stores in Ireland. Systems manufactured by Danfoss and Copeland/Dixell were compromised, causing temperatures to spike. While pro-Russian hacking groups claimed responsibility, the Kremlin dismissed these allegations as absurd, citing a complete lack of verifiable evidence.
3Aviation Sector Under Siege
Bomb threats caused significant disruption to European airspace, impacting at least seven flights on Tuesday and 27 more on Thursday. Several aircraft, including Ryanair and Aer Lingus flights, required military escorts and emergency diversions. Despite these intense security measures, no viable explosive devices were discovered during any of the thorough airport searches.
4Email Threat Analysis
The threatening email sent to media outlets on Friday originated from a Lithuanian school domain. Technical analysis suggests the message passed through authorized Microsoft infrastructure, making simple spoofing unlikely. Cybersecurity experts believe the sender likely gained unauthorized access to a legitimate account, a method consistent with previous threats observed in recent months.
5Compromised Credentials as Vector
Researcher Maciej Makowski identified that the email account used for Friday's threat had credentials exposed in at least two prior data breaches. This pattern mirrors earlier threats against schools in Carlow, where attackers utilized compromised university and Gmail accounts. These incidents highlight the persistent risk posed by reused passwords and leaked data.
6Lack of Direct Evidence
While Friday's email claimed responsibility for the earlier airline threats, investigators have found no independently verifiable evidence linking the two. The messages share broad characteristics, such as vague political grievances and short deadlines, but they do not name specific buildings or recipients. Authorities remain cautious about establishing a common source.
7Security Cooperation and Response
An Garda Síochána and the Irish Defence Forces are actively liaising with European security counterparts to identify the perpetrators. The government acknowledged the potential for a coordinated disruption campaign, noting that security services were already planning for EU Presidency events. Investigations are ongoing to determine if these are individual or organized acts.
8Challenges in Attribution
Attributing these attacks remains complex, as investigators must distinguish between legitimate account activity and unauthorized takeovers. Success depends on analyzing the duration of account compromise and identifying patterns across multiple incidents. Until forensic evidence links specific actors to the disruptions, the true origin of these widespread threats remains officially unresolved.
Original article: RTÉ News — Wave of Cyberattacks and Bomb Threats Disrupts European Infrastructure