# Pro-Russian Cyber Groups Target European Infrastructure and Officials Hackers linked to Everest and Noname057 escalate hybrid warfare against critical European assets. - **Source:** [Il Sole 24 Ore – Italia](https://www.ilsole24ore.com) - **Published:** 2026-11-08 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/c6d6e0aa-695c-409b-883e-ad39d8cecbb7 ## Brenner Tunnel Cyber Incident On October 17, the Brenner Base Tunnel project, managed by BBT SE, suffered a targeted cyberattack. Unauthorized parties accessed non-public data via the internet. Authorities, including the Bolzano Postal Police, are investigating the breach. The company confirmed that the incident did not disrupt ongoing construction works or impact operational activities. ## Everest Group Involvement Investigators suspect the Russian-speaking cybercriminal network known as Everest is behind the Brenner attack. This international extortion group specializes in stealing sensitive data and threatening to publish it online unless a ransom is paid. Their involvement highlights the growing trend of criminal syndicates acting as proxies in hybrid conflicts. ## Escalating Hybrid Warfare European intelligence services are investigating a series of recent flight disruptions and bomb threats across the continent. Officials suspect Russian state-linked actors or activists are orchestrating these events. The FBI has joined the investigation, recently alerting Lisbon police to specific threats targeting Ryanair and TAP flights bound for major cities. ## Targeting Italian Officials The pro-Russian group Noname057 allegedly offered payments for private data belonging to 18 individuals deemed hostile to Moscow. Targets include Foreign Minister Antonio Tajani, Rome prosecutor Francesco Lo Voi, and Postal Police director Ivano Gabrielli. The data appeared on the dark web, specifically within an area accessible via the Tor network. ## Strategic Institutional Impact The list of targeted individuals also includes Paolo Tassan-Zanin, mayor of Aviano, which hosts a NATO air base. Foreign Minister Tajani linked these aggressive actions to Italy's firm support for Ukraine. The government is treating the exposure of sensitive institutional information as a severe security threat requiring immediate and decisive countermeasures. ## Diplomatic Response Strategy In response to rising hybrid threats, Minister Tajani requested that the G7 presidency prioritize cybersecurity at the upcoming ministerial meeting in Paris. Prime Minister Giorgia Meloni expressed full solidarity with the targeted officials, emphasizing that such breaches of institutional security must be addressed with the utmost determination by the national government. ## Defense Ministry Perspective Defense Minister Guido Crosetto has long warned about the reality of hybrid warfare and national vulnerabilities. He argues that the country must shift from reacting to threats toward proactive anticipation. Crosetto emphasized that comprehensive security must become a national priority immediately, rather than waiting until a catastrophic failure occurs later on. ## Complex Attribution Challenges Attributing cyber threats to specific state actors remains a complex, time-consuming process for international investigators. While evidence points toward Russian-aligned groups, definitive conclusions are not guaranteed. The current situation underscores the urgent need for enhanced cross-border intelligence sharing to mitigate the impact of these persistent, evolving digital security risks. ## Sources covering this story - https://www.ilsole24ore.com/art/la-pista-filorussi-everest-l-attacco-hacker-brennero-AJtSO88B — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._