Lyce · Hybrid Watch

hw_82b76acc1be42744

Hacker attacks on Italian banks attributed to pro-Russian groups.

Italy’s national cyber-security agency reported that a wave of distributed-denial-of-service (DDoS) attacks had temporarily made the websites of several major banks unreachable. The agency stated that it had identified the re-activation of DDoS campaigns by pro-Russian hacker groups targeting national institutional subjects. The incident did not report physical destruction, but the banks’ online presence was disrupted, and some services were unavailable for a time. The attack struck Italy’s internal financial-sector infrastructure rather than a border region, maritime zone or air-space theatre. The dynamics reflect how hybrid-warfare tools now include disruption of banking systems in allied states: by disabling access to major financial platforms, attackers impose cost, reduce trust, and stretch defensive resources without deploying bombs or ships. Although mobile applications remained functional at some banks, the incident revealed systemic vulnerability and the ability of Russian-aligned actors to strike at the heart of Italy’s economic infrastructure. The timing and target set suggest that such attacks are part of a broader pattern of pressure on NATO/EU member states supporting Ukraine.

Occurrence
2023-08-01
Publication
2023-07-31T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
IT
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2023-07-31T22:00:00Z

    Italy’s national cyber-security agency reported that a wave of distributed-denial-of-service (DDoS) attacks had temporarily made the websites of several major banks unreachable. The agency stated that it had identified the re-activation of DDoS campaigns by pro-Russian hacker groups targeting national institutional subjects. The incident did not report physical destruction, but the banks’ online presence was disrupted, and some services were unavailable for a time. The attack struck Italy’s internal financial-sector infrastructure rather than a border region, maritime zone or air-space theatre. The dynamics reflect how hybrid-warfare tools now include disruption of banking systems in allied states: by disabling access to major financial platforms, attackers impose cost, reduce trust, and stretch defensive resources without deploying bombs or ships. Although mobile applications remained functional at some banks, the incident revealed systemic vulnerability and the ability of Russian-aligned actors to strike at the heart of Italy’s economic infrastructure. The timing and target set suggest that such attacks are part of a broader pattern of pressure on NATO/EU member states supporting Ukraine.