Lyce · Hybrid Watch

hw_74419371fc6b302d

Cyber-attack on Bulgarian presidential and ministerial websites blamed on Russia.

View this signal on the map

Bulgarian authorities announced that the websites of the President’s Office and several major ministries were subjected to a large-scale distributed-denial-of-service (DDoS) attack originating from the Russian city of Magnitogorsk, according to the Prosecutor-General. The sites of the Defence, Interior and Justice Ministries, as well as the Constitutional Court, reportedly became inaccessible or massively slowed down, impacting internal administrative and public-facing systems. The attack was described by the Bulgarian Prosecutor-General as a “serious problem” and “an attack on the Bulgarian state.” While no physical infrastructure was destroyed, the event marks a clear case of cyber-intrusion and disruption of state-institution networks, aligning with hybrid-warfare tactics. The incident covers Bulgaria’s capital region and national government systems, rather than a frontier or military base. The dynamics show how Russian-linked actors leverage cyber means to impose cost, degrade state readiness and sow confusion in a NATO/EU-member state supporting Ukraine. The fact that conventional services were disrupted but no public attribution beyond “Russian hackers” was given underscores the stealth-and-deniability nature of contemporary hybrid warfare.

Occurrence
Publication
First observed
Review status
Not assessed
Countries
Bulgaria
Updated

Attribution

Official

Facts

No facts

Sources

  1. Role
    Discovery lead
    Publication

    Bulgarian authorities announced that the websites of the President’s Office and several major ministries were subjected to a large-scale distributed-denial-of-service (DDoS) attack originating from the Russian city of Magnitogorsk, according to the Prosecutor-General. The sites of the Defence, Interior and Justice Ministries, as well as the Constitutional Court, reportedly became inaccessible or massively slowed down, impacting internal administrative and public-facing systems. The attack was described by the Bulgarian Prosecutor-General as a “serious problem” and “an attack on the Bulgarian state.” While no physical infrastructure was destroyed, the event marks a clear case of cyber-intrusion and disruption of state-institution networks, aligning with hybrid-warfare tactics. The incident covers Bulgaria’s capital region and national government systems, rather than a frontier or military base. The dynamics show how Russian-linked actors leverage cyber means to impose cost, degrade state readiness and sow confusion in a NATO/EU-member state supporting Ukraine. The fact that conventional services were disrupted but no public attribution beyond “Russian hackers” was given underscores the stealth-and-deniability nature of contemporary hybrid warfare.