Lyce · Hybrid Watch
hw_aba10db31932d2dd
Russiskrelateret cyberoperation ledsager droneindtrængen i polsk luftrum
Den 10. september 2025 oplevede Polen en intensiv russiskrelateret onlineoperation, der faldt sammen med indtrængen af russiske droner i polsk luftrum. Ifølge digitaliseringsminister Krzysztof Gawkowski var operationen den største af sin art, der har ramt Polen siden Ruslands fuldskalainvasion af Ukraine i 2022. Russiskrelaterede netværk skulle have aktiveret tidligere inaktive automatiserede konti for at sprede påstande om, at Ukraine bevidst havde sendt droner til Polen for at provokere en bredere konflikt. De polske myndigheder identificerede aktiviteten som en del af et koordineret forsøg på at manipulere offentlighedens opfattelse af dronehændelsen og underminere tilliden til Ukraine og Polens sikkerhedsrespons. Gawkowski knyttede operationen til den bredere eskalering af russisk cyberaktivitet mod Polen. Reuters identificerede dog ikke et specifikt kompromitteret netværk, berørt organisation, implementeret malware eller forstyrrelse af kritisk infrastruktur forbundet med netop denne operation.
Attribution
Officiel
Fakta
Ingen fakta
Kilder
-
- Rolle
- Søgespor
- Offentliggørelse
On 10 September 2025, Poland experienced an intensive Russian-linked online operation coinciding with the incursion of Russian drones into Polish airspace. According to Digital Affairs Minister Krzysztof Gawkowski, the operation was the largest of its kind affecting Poland since Russia’s full-scale invasion of Ukraine in 2022. Russian-linked networks reportedly activated previously dormant automated accounts to circulate claims that Ukraine had deliberately sent drones into Poland to provoke a wider conflict. Polish authorities identified the activity as part of a coordinated attempt to manipulate public perceptions of the drone incident and undermine confidence in Ukraine and Poland’s security response. Gawkowski connected the operation to the broader escalation of Russian cyber activity against Poland. However, Reuters did not identify a specific compromised network, affected organisation, deployed malware or disruption to critical infrastructure associated with this particular operation.