DDoS Attacks In Poland Have Spiked As New Government Takes Office

Uploaded on 2024-02-13 in INTELLIGENCE-Hot Spots-Russia, GOVERNMENT-National, FREE TO VIEW

Changes in political leadership often causes disruptions in many areas, including cyberspace, where Distributed Denial of Service (DDOS) attacks often increase when there is a change of government. These spikes often result from hacktivist and other groups opposing the viewpoints of newly elected officials.

Now, Poland has become the target of several threat groups after new Prime Minister Donal Tusk was sworn in to office following a hotly contested election.

The most notable group targeting Poland is NoName057, who have targeted several types of websites, including government administration, transportation and logistics, finance, judicial government, manufacturing, air transport the and media.

No Name are a prolific pro-Russian hacktivist group which has developed tools readily available to like-minded threat actors.

Analysts at business intelligence and cybersecurity firm NetSCout who have been tracking tracking DDoS attack trends against Poland have detected spikes in attacks beginning just days following the election of Prime Minister Tusk's newly formed administration. The attack volume began to increase after Christmas and have remained at a high level, spiking on January 14th with more than 5,000 total attacks.

This spike in attacks, fuelled by the new government’s support of Ukraine in fending off Russian military aggression has, resulted in an increase in DDoS attack volume by a factor of four.

NoName057 typically uses botnets running their DDoSia code to power their attacks. Upon diving into Poland’s DDoS attack traffic, it was discovered that nearly half of the attacks against the nation were sourced from nodes that are classified as DDoS bots. This massive influx represents 15-20% of the global botnet DDoS attacks currently focus on Poland.

It seems likely that groups like NoName057 will continue to wage a political war against any nation that it disapproves of. That means that governments, service providers, and enterprises should be prepared for these attacks to continue and grow.

Image: Nina Hill

You Might Also Read:

Russian Hackers Hit Italian Banks:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.