Lyce · Hybrid Watch

hw_99aec33468e0d307

Cyber-attack on Montenegro government servers, attributed to Russian services.

The ANB publicly announced that coordinated cyber-attacks, which it attributed to Russian state services, had targeted Montenegrin government servers, including systems linked to state-run transportation services, water and electricity infrastructure. According to the report, this was described as a “hybrid war” scenario by Montenegrin authorities, illustrating that Russia’s hostile engagements extend into cyber-domain operations against smaller states in the Balkans. The attack cut across inland infrastructure rather than a contested border or frontline region, showing that hybrid warfare reaches deep into national systems. The dynamics reveal how an adversary can implicitly threaten critical infrastructure (transport, utilities) without using kinetic weapons—disruption and attribution alone serve to raise cost and uncertainty. Montenegro’s public disclosure of the attack and its attribution to Russia marks how even NATO-member states in the Western Balkans are experiencing hybrid-threat pressure from Moscow. The incident underscores the region’s vulnerability to non-kinetic operations—in this case, settings of transport and utilities—where disruption of service could have ripple effects on national resilience.

Occurrence
2022-08-26
Publication
2022-08-25T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
ME
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2022-08-25T22:00:00Z

    The ANB publicly announced that coordinated cyber-attacks, which it attributed to Russian state services, had targeted Montenegrin government servers, including systems linked to state-run transportation services, water and electricity infrastructure. According to the report, this was described as a “hybrid war” scenario by Montenegrin authorities, illustrating that Russia’s hostile engagements extend into cyber-domain operations against smaller states in the Balkans. The attack cut across inland infrastructure rather than a contested border or frontline region, showing that hybrid warfare reaches deep into national systems. The dynamics reveal how an adversary can implicitly threaten critical infrastructure (transport, utilities) without using kinetic weapons—disruption and attribution alone serve to raise cost and uncertainty. Montenegro’s public disclosure of the attack and its attribution to Russia marks how even NATO-member states in the Western Balkans are experiencing hybrid-threat pressure from Moscow. The incident underscores the region’s vulnerability to non-kinetic operations—in this case, settings of transport and utilities—where disruption of service could have ripple effects on national resilience.