Germany’s cybersecurity agency and Alphabet’s Mandiant cyber unit claim that elite hackers believed to be linked to Russian intelligence, launched cyberattacks against various German political parties last month.
Following the attack, Germany’s cybersecurity agency and Alphabet’s Mandiant cyber unit warned about these attempts to infiltrate networks and steal data.
Mandiant detected efforts by APT29, associated with Russia’s SVR foreign spy agency, targeting key German political figures with deceptive emails. These emails posed as invitations to a non-existent dinner event by the Christian Democratic Union (CDU) on March 1.
Germany’s BSI cyber agency also highlighted these espionage attempts aimed at long-term access to and data theft from German political entities.
The CDU acknowledged its vulnerability to such cyberattacks, stating it was promptly informed about this specific incident, which referenced a fabricated event.
Details regarding the identities of the targets or the perpetrators were not disclosed. The BSI and the Russian embassy in Washington have yet to comment on these reports.
According to the BSI, such espionage activities focus on politicians amid the “upcoming European elections.” Mandiant’s analysis suggests these actions align with Russia’s broader strategy to weaken European support for Ukraine.
The cyber espionage campaign is part of a larger context of strained relations between Germany, which supports Ukraine militarily, and Russia, as noted by Russian President Vladimir Putin.