Lyce · Hybrid Watch

hw_876a80285209615c

Pro-Russian hackers conduct consecutive daily attacks on Italian critical infrastructure websites.

A pro-Russian hacker group launched attacks over three consecutive days, explicitly targeting Italy in retaliation for the Italian President’s remarks on Russia’s invasion of Ukraine. The targets included websites associated with ports, financial markets and transport networks, showing a broad sweep across critical infrastructure sectors. The geographic focus is within Italy’s national infrastructure rather than an external front, reinforcing the “deep-inland” nature of these operations. The dynamics show how adversaries use digital campaigns timed with political events (such as the President’s remarks) to apply pressure, create distraction and degrade institutional trust. Although the websites remained functional overall, the high-profile nature of the targets and the timing underscore the strategic intent behind the attacks. The incident illustrates how Italy’s support of Ukraine places it at risk of retaliation across multiple domains, not just conventional warfare.

Occurrence
2025-02-22
Publication
2025-02-21T23:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
IT
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2025-02-21T23:00:00Z

    A pro-Russian hacker group launched attacks over three consecutive days, explicitly targeting Italy in retaliation for the Italian President’s remarks on Russia’s invasion of Ukraine. The targets included websites associated with ports, financial markets and transport networks, showing a broad sweep across critical infrastructure sectors. The geographic focus is within Italy’s national infrastructure rather than an external front, reinforcing the “deep-inland” nature of these operations. The dynamics show how adversaries use digital campaigns timed with political events (such as the President’s remarks) to apply pressure, create distraction and degrade institutional trust. Although the websites remained functional overall, the high-profile nature of the targets and the timing underscore the strategic intent behind the attacks. The incident illustrates how Italy’s support of Ukraine places it at risk of retaliation across multiple domains, not just conventional warfare.