Pro-Russian Cyber Groups Target European Infrastructure and Officials
Hackers linked to Everest and Noname057 escalate hybrid warfare against critical European assets.
1Brenner Tunnel Cyber Incident
On October 17, the Brenner Base Tunnel project, managed by BBT SE, suffered a targeted cyberattack. Unauthorized parties accessed non-public data via the internet. Authorities, including the Bolzano Postal Police, are investigating the breach. The company confirmed that the incident did not disrupt ongoing construction works or impact operational activities.
2Everest Group Involvement
Investigators suspect the Russian-speaking cybercriminal network known as Everest is behind the Brenner attack. This international extortion group specializes in stealing sensitive data and threatening to publish it online unless a ransom is paid. Their involvement highlights the growing trend of criminal syndicates acting as proxies in hybrid conflicts.
3Escalating Hybrid Warfare
European intelligence services are investigating a series of recent flight disruptions and bomb threats across the continent. Officials suspect Russian state-linked actors or activists are orchestrating these events. The FBI has joined the investigation, recently alerting Lisbon police to specific threats targeting Ryanair and TAP flights bound for major cities.
4Targeting Italian Officials
The pro-Russian group Noname057 allegedly offered payments for private data belonging to 18 individuals deemed hostile to Moscow. Targets include Foreign Minister Antonio Tajani, Rome prosecutor Francesco Lo Voi, and Postal Police director Ivano Gabrielli. The data appeared on the dark web, specifically within an area accessible via the Tor network.
5Strategic Institutional Impact
The list of targeted individuals also includes Paolo Tassan-Zanin, mayor of Aviano, which hosts a NATO air base. Foreign Minister Tajani linked these aggressive actions to Italy's firm support for Ukraine. The government is treating the exposure of sensitive institutional information as a severe security threat requiring immediate and decisive countermeasures.
6Diplomatic Response Strategy
In response to rising hybrid threats, Minister Tajani requested that the G7 presidency prioritize cybersecurity at the upcoming ministerial meeting in Paris. Prime Minister Giorgia Meloni expressed full solidarity with the targeted officials, emphasizing that such breaches of institutional security must be addressed with the utmost determination by the national government.
7Defense Ministry Perspective
Defense Minister Guido Crosetto has long warned about the reality of hybrid warfare and national vulnerabilities. He argues that the country must shift from reacting to threats toward proactive anticipation. Crosetto emphasized that comprehensive security must become a national priority immediately, rather than waiting until a catastrophic failure occurs later on.
8Complex Attribution Challenges
Attributing cyber threats to specific state actors remains a complex, time-consuming process for international investigators. While evidence points toward Russian-aligned groups, definitive conclusions are not guaranteed. The current situation underscores the urgent need for enhanced cross-border intelligence sharing to mitigate the impact of these persistent, evolving digital security risks.