Denmark Accuses Russia of Cyberattack on Water Supply

▼ Summary
– Danish intelligence officially blamed Russia for cyberattacks on Denmark’s critical infrastructure, calling it part of Moscow’s hybrid war against the West.
– They identified two Russian state-linked groups: Z-Pentest for a water-utility attack and NoName057(16) for election-related DDoS assaults.
– The attacks aim to create insecurity and punish countries like Denmark for supporting Ukraine, using elections to attract public attention.
– Denmark’s defence minister condemned the “unacceptable” attacks, and the foreign office will summon the Russian ambassador for clarifications.
– A recent international advisory warns that pro-Russia hacktivist groups, including those named, are actively targeting critical infrastructure globally.
Danish intelligence authorities have formally attributed a series of damaging cyberattacks on the nation’s critical infrastructure to the Russian state. The Danish Defence Intelligence Service (DDIS) identified two specific groups, Z-Pentest and NoName057(16), as instruments of a broader Russian hybrid warfare campaign aimed at Western nations. Officials state the objective is to sow public insecurity and penalize countries, like Denmark, for their support of Ukraine.
According to a detailed statement released on Thursday, the group known as Z-Pentest is linked to a destructive attack targeting a Danish water utility. Simultaneously, the hacktivist collective NoName057(16) was flagged for conducting disruptive distributed denial-of-service (DDoS) assaults ahead of local elections. Intelligence assessments indicate Russia’s cyber operations are a component of a wider influence campaign designed to erode Western backing for Ukraine, with democratic elections being exploited as platforms to garner attention.
Denmark has been a staunch supporter of Ukraine since the full-scale invasion began, contributing military aid, training, and financial assistance while participating in international sanctions against Moscow. Defence Minister Troels Lund Poulsen characterized the incidents as clear evidence of an active hybrid conflict. He described the attacks as completely unacceptable, confirming that the Russian ambassador would be summoned to provide official clarifications.
This incident is not isolated within the Nordic region. Earlier this year, Norwegian security services blamed pro-Russian actors for manipulating operational systems to open outflow valves at a dam. Furthermore, Denmark’s own National Security Authority previously linked DDoS attacks disrupting vital websites to a pro-Russian group called Legion.
The threat appears to be escalating globally. In a recent joint advisory, cybersecurity agencies from the United States, Europe, and other nations warned that pro-Russia hacktivist groups are actively targeting critical infrastructure organizations worldwide. The advisory specifically named groups including NoName, Z-Pentest, and the Cyber Army of Russia Reborn, highlighting a coordinated and persistent threat to essential services across allied nations.
(Source: Bleeping Computer)




