Russia Accused Of Cyber Attack On Norway

Russia has been accused of carrying out a "significant" cyber-attack on the Norwegian parliament in August. In this attack/hack, unauthorised individuals got access to the email accounts of several elected members of the Storting, Norway's single-chamber parliament.

The cyber criminals also hacked into accounts belonging to the parliament’s employees. An unspecified amount of data was stolen and this has members of Norway's main opposition party.

Norway's foreign minister, Ine Eriksen Soereide, told reporters that the attack was created by Russia and she said it is very a serious incident affecting the country's "most important democratic institution.....This is a serious event that hit our most important democratic institution.... Based on the information available to the government, it is our assessment that Russia stood behind this activity."” said Soereide.

Soereide did not give details of any action that Norway might take against its neighbor. A Norwegian foreign ministry spokeswoman declined to comment when asked whether Russia would be asked to recall its ambassador or any of its diplomats from Norway. 

Moscow has rejected Norway's claim, calling it a ‘serious and willful provocation.’ In addition, the Russian embassy referred to the fact that Russia does not blame the authorities of other countries in such cases, despite the fact that millions of cyber-attacks are annually committed on Russian state Internet resources from abroad, including from foreign missions in Norway.

These sort of events go back also to September 2018 when a Russian IT adviser named Mikhail Bochkaryov was arrested at Oslo Airport after exhibiting strange behavior at an IT conference held in Norway's parliament.  Bochkaryov, an employee of the Russian parliament's upper chamber, had been attending a seminar organised by the European Centre for Parliamentary Research and Documentation on the Storting's digitalisation process. 

Norway’s Police Security Service (PST) said the IT professional had been detained on suspicion of illegal intelligence activities and later released with charge.

  • In 2017, Norway accused APT 29 of carrying out spear-phishing attacks on Norway’s foreign ministry, army, and other institutions. Arne Christian Haugstoyl, an official with PST, said that the group, which has "links to the Russian authorities," had targeted nine different email accounts.  
  • In 2018, NATO member Norway arrested a Russian national suspected of gathering information on the parliament's internet network, but released him several weeks later due to lack of evidence.

The two countries, which share a common border in the Arctic, have had good relations, but these have become strained since Russia's annexation of Ukrainean territory in the  Crimean peninsula 

RFERL:         Infosecurity Magazine:         Security Week:        BBC:         112 UA

You Might Also Read: 

German Government Hit By Russian Hackers:

 

« Social Media Has Gone Global
Artificial Intelligence: Threats & Opportunities »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

D-Fence

D-Fence

D-Fence high availability security service protects corporate email communication, the company and it's employee's against cyber threats.

KPN Security

KPN Security

KPN Security is the largest and most complete provider of IT security services in the Netherlands.

SecuPi

SecuPi

SecuPi delivers data-centric security with data-flow discovery, real-time monitoring, behavior analytics, and protection across web and enterprise applications and big data environments.

Digittrade

Digittrade

Digittrade develop and produce external encrypted hard disks and secure communications apps.

High Wire Networks

High Wire Networks

High Wire Network’s Overwatch Managed Security Plaform-as-a-Service offers organizations end-to-end protection for networks, data, endpoints and users.

TM One

TM One

TM One is the enterprise and public sector business solutions arm of Telekom Malaysia Berhad (TM) Group.

StartupXseed Ventures

StartupXseed Ventures

StartupXseed Ventures is a smart capital provider for Deep Tech, B2B, Early Stage Startups. We support, NextGen Tech Entrepreneurs, who have potential to deliver the outsized growth.

MazeBolt Technologies

MazeBolt Technologies

Israel-based MazeBolt is an innovation leader in cybersecurity, with over two decades of experience in pioneering DDoS protection solutions.

Exterro

Exterro

Exterro is a leading provider of e-discovery and information governance software specifically designed for in-house legal, privacy and IT teams at Global 2000 and Am Law 200 organizations.

META-Cyber

META-Cyber

META-cyber was founded by engineers with experience in process and control-protection to provide cyber security for industrial infrastructure.

Kirk ISS

Kirk ISS

Kirk ISS are the leading provider of IT services in the Cayman Islands. We offer best-in class hardware, software, communications and cloud computing, all backed by professional services support.

Goldilock

Goldilock

Goldilock is redefining how sensitive data, devices, networks and critical infrastructure can be secured.

ATHENE National Research Center For Applied Cybersecurity

ATHENE National Research Center For Applied Cybersecurity

ATHENE is the largest research center for cybersecurity and privacy in Europe, conducting application-oriented top-level research for the benefit of the economy, society and the state.

Cyber Guru

Cyber Guru

Cyber Guru is an effective cybersecurity awareness training platform, enabling organisations to increase their resistance to cyber-attacks by changing employee behaviour.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Hexagate

Hexagate

Hexagate is at the forefront of blockchain threat prevention and automated risk management, proactively detecting and mitigating threats to smart contracts and onchain assets.