Russia Accused Of Cyber Attack On Norway

Russia has been accused of carrying out a "significant" cyber-attack on the Norwegian parliament in August. In this attack/hack, unauthorised individuals got access to the email accounts of several elected members of the Storting, Norway's single-chamber parliament.

The cyber criminals also hacked into accounts belonging to the parliament’s employees. An unspecified amount of data was stolen and this has members of Norway's main opposition party.

Norway's foreign minister, Ine Eriksen Soereide, told reporters that the attack was created by Russia and she said it is very a serious incident affecting the country's "most important democratic institution.....This is a serious event that hit our most important democratic institution.... Based on the information available to the government, it is our assessment that Russia stood behind this activity."” said Soereide.

Soereide did not give details of any action that Norway might take against its neighbor. A Norwegian foreign ministry spokeswoman declined to comment when asked whether Russia would be asked to recall its ambassador or any of its diplomats from Norway. 

Moscow has rejected Norway's claim, calling it a ‘serious and willful provocation.’ In addition, the Russian embassy referred to the fact that Russia does not blame the authorities of other countries in such cases, despite the fact that millions of cyber-attacks are annually committed on Russian state Internet resources from abroad, including from foreign missions in Norway.

These sort of events go back also to September 2018 when a Russian IT adviser named Mikhail Bochkaryov was arrested at Oslo Airport after exhibiting strange behavior at an IT conference held in Norway's parliament.  Bochkaryov, an employee of the Russian parliament's upper chamber, had been attending a seminar organised by the European Centre for Parliamentary Research and Documentation on the Storting's digitalisation process. 

Norway’s Police Security Service (PST) said the IT professional had been detained on suspicion of illegal intelligence activities and later released with charge.

  • In 2017, Norway accused APT 29 of carrying out spear-phishing attacks on Norway’s foreign ministry, army, and other institutions. Arne Christian Haugstoyl, an official with PST, said that the group, which has "links to the Russian authorities," had targeted nine different email accounts.  
  • In 2018, NATO member Norway arrested a Russian national suspected of gathering information on the parliament's internet network, but released him several weeks later due to lack of evidence.

The two countries, which share a common border in the Arctic, have had good relations, but these have become strained since Russia's annexation of Ukrainean territory in the  Crimean peninsula 

RFERL:         Infosecurity Magazine:         Security Week:        BBC:         112 UA

You Might Also Read: 

German Government Hit By Russian Hackers:

 

« Social Media Has Gone Global
Artificial Intelligence: Threats & Opportunities »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

enSilo

enSilo

enSilo secures customers data on premise or in the cloud. Regardless of the where the threat comes from, enSilo can protect your data.

InteliSecure

InteliSecure

InteliSecure offer Professional Services, Security Assessments and Managed Services for data and threat protection.

PROMIA

PROMIA

PROMIA is in the business of providing solutions that are designed to support highly secure, reliable, scalable and interoperable business applications.

ShadowDragon

ShadowDragon

ShadowDragon develops digital tools that simplify the complexities of modern investigations that involve multiple online environments and technologies.

LaoCERT

LaoCERT

LaoCERT is the national Computer Incident Response Team for Laos.

certSIGN

certSIGN

certSIGN develop innovative software for information security and information systems protection.

CyberGuru

CyberGuru

CyberGuru is a service provided by CyberSecurity Malaysia specializing in cyber security professional training and development.

TM One

TM One

TM One is the enterprise and public sector business solutions arm of Telekom Malaysia Berhad (TM) Group.

NeuVector

NeuVector

NeuVector, the leader in Full Lifecycle Container Security, delivers uncompromising end-to-end security from DevOps vulnerability protection to complete protection in production.

Skudo

Skudo

Skudo is dedicated to creating innovative best-in-class solutions that protect data exchange with the highest level of security and privacy.

Otorio

Otorio

OTORIO delivers industrial cybersecurity and digital risk-management solutions and services. We help our customers to keep their revenue-generating operations resilient, efficient, and safe.

NSI Global

NSI Global

NSI Global is a specialist Global Risk and Intelligence Advisory Firm that has built a reputation for consistently managing complex projects.

Liquis Inc.

Liquis Inc.

Liquis, founded in 2002, is one of the largest facility decommissioning services companies in the U.S.

ITButler e-Services

ITButler e-Services

At IT Butler, our mission is crystal clear: we are dedicated to providing top-tier cybersecurity solutions and best-practice methodologies to secure and enhance your digital infrastructure’s resilienc

Securitribe

Securitribe

Securitribe provides cybersecurity and compliance solutions, including vCISO services, ISO27001, and ASD Essential 8 advisory, helping businesses and government strengthen security & compliance.

Reasonable Risk

Reasonable Risk

Reasonable Risk is the only SaaS GRC platform with Duty of Care Risk Analysis (DoCRA) built in, providing a sensible and defensible cybersecurity position for an organization.