Germany links cyberattack on research group to Russian state-backed hackers

Summary: German authorities suspect Russian state-backed hackers were behind a cyberattack on the German Association for Eastern European Studies (DGO), marking the second incident in recent months. The attack targeted the organization’s email systems and is believed to be linked to APT29, a group associated with Russia’s Foreign Intelligence Service. German lawmakers condemned the attack as part of Moscow’s broader campaign against European democratic institutions.

Affected: German Association for Eastern European Studies (DGO)

Keypoints:

• Cyberattack occurred at the end of March and bypassed newly implemented cybersecurity measures.
• German intelligence suspects the involvement of APT29, also known as Cozy Bear.
• The DGO previously faced hostility from Russia, being labeled an “extremist organization” and having operations banned.
• At least 27 German institutions have been classified as “undesirable” or “extremist” by Moscow, indicating a targeted campaign against them.
• German lawmakers view the attack as an assault on academic freedom and a strategy to intimidate scholars.
• Germany’s domestic intelligence agency warns of escalating threats from Russian espionage and disinformation operations.