Lyce · Hybrid Watch

hw_74419371fc6b302d

Cyber-attack on Bulgarian presidential and ministerial websites blamed on Russia.

Bulgarian authorities announced that the websites of the President’s Office and several major ministries were subjected to a large-scale distributed-denial-of-service (DDoS) attack originating from the Russian city of Magnitogorsk, according to the Prosecutor-General. The sites of the Defence, Interior and Justice Ministries, as well as the Constitutional Court, reportedly became inaccessible or massively slowed down, impacting internal administrative and public-facing systems. The attack was described by the Bulgarian Prosecutor-General as a “serious problem” and “an attack on the Bulgarian state.” While no physical infrastructure was destroyed, the event marks a clear case of cyber-intrusion and disruption of state-institution networks, aligning with hybrid-warfare tactics. The incident covers Bulgaria’s capital region and national government systems, rather than a frontier or military base. The dynamics show how Russian-linked actors leverage cyber means to impose cost, degrade state readiness and sow confusion in a NATO/EU-member state supporting Ukraine. The fact that conventional services were disrupted but no public attribution beyond “Russian hackers” was given underscores the stealth-and-deniability nature of contemporary hybrid warfare.

Occurrence
2022-10-15
Publication
2022-10-14T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
BG
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2022-10-14T22:00:00Z

    Bulgarian authorities announced that the websites of the President’s Office and several major ministries were subjected to a large-scale distributed-denial-of-service (DDoS) attack originating from the Russian city of Magnitogorsk, according to the Prosecutor-General. The sites of the Defence, Interior and Justice Ministries, as well as the Constitutional Court, reportedly became inaccessible or massively slowed down, impacting internal administrative and public-facing systems. The attack was described by the Bulgarian Prosecutor-General as a “serious problem” and “an attack on the Bulgarian state.” While no physical infrastructure was destroyed, the event marks a clear case of cyber-intrusion and disruption of state-institution networks, aligning with hybrid-warfare tactics. The incident covers Bulgaria’s capital region and national government systems, rather than a frontier or military base. The dynamics show how Russian-linked actors leverage cyber means to impose cost, degrade state readiness and sow confusion in a NATO/EU-member state supporting Ukraine. The fact that conventional services were disrupted but no public attribution beyond “Russian hackers” was given underscores the stealth-and-deniability nature of contemporary hybrid warfare.