European intelligence agencies warn that investigating suspected Russian interference now demands as much attention and resources as counterterrorism operations, highlighting the growing scale and sophistication of cyber threats across the continent. The latest high-profile disruption struck France’s national postal service during the Christmas delivery peak, demonstrating the wide-reaching impact of such attacks.
Pro-Russian Hackers Target La Poste
French prosecutors said Wednesday that the pro-Russian hacking group Noname057(16) claimed responsibility for the cyberattack that knocked La Poste’s central computer systems offline on Monday. The disruption prevented postal workers from tracking packages and disrupted online payments at La Banque Postale, La Poste’s banking arm. The attack occurred during the busiest season of the year for the company, which employs more than 200,000 people. Following the group’s claim, the French domestic intelligence agency DGSI assumed control of the investigation, according to the Paris prosecutor’s office.
A Persistent Threat Across Europe
Noname057(16) has a long history of attacks on Ukrainian media outlets and government and corporate websites in countries including Poland, Sweden and Germany. The group has also targeted French government websites, including the Ministry of Justice and multiple prefectures and cities. Authorities coordinated an international crackdown in July under Operation Eastwood, involving 12 countries. Police dismantled more than 100 servers, made two arrests in France and Spain, and issued seven arrest warrants, six of them for Russian nationals. Despite these efforts, the group resumed operations within days and has remained active, illustrating the resilience and reach of its cyber campaigns.
Wider Security Concerns in France
The La Poste disruption followed a separate cyberattack on France’s Interior Ministry, which oversees national security. Interior Minister Laurent Nunez told broadcaster Franceinfo that a suspected hacker extracted dozens of sensitive documents and gained access to police records, including information on wanted individuals. Prosecutors also revealed last week that France’s counterintelligence agency is investigating a suspected plot involving software that could have enabled remote control of computer systems on an international passenger ferry. A Latvian crew member is being held on charges of acting for an unidentified foreign power. Nunez hinted at Russian involvement, saying “foreign interference very often comes from same country,” though authorities have not formally attributed the attacks.
Russia’s Hybrid Warfare Across Europe
France and other European allies of Ukraine accuse Russia of waging a campaign of “hybrid warfare,” combining sabotage, cyberattacks, assassinations and disinformation to destabilize Western societies and weaken support for Ukraine. Since Moscow’s full-scale invasion of Ukraine in February 2022, Western officials have linked dozens of incidents across Europe to Russian actors, including arson attacks on warehouses, railway sabotage and widespread vandalism. European intelligence agencies report that tracking such interference has become as time-consuming and urgent as responding to terrorist threats, reflecting the persistent and evolving nature of these security challenges.
