Lyce · Hybrid Watch

hw_c060893ad807b894

Russian hackers apparently probing critical infrastructure in Slovakia.

The head of cyber-security at the Slovak utility company SSD, Tibor Paulen, warned that Russian hackers had undertaken efforts to place “footholds” inside Slovakia’s critical infrastructure—principally energy-distribution firms—since Russia’s invasion of Ukraine. The article states these intrusions were not yet destructive but were positions built inside networks of poorly secured companies, intended to pave the way for future attacks. Paulen said the attackers used social-engineering methods and targeted employees and suppliers—“the weakest link”—to install malware or gain access credentials. The geographic focus is Slovakia’s interior energy-distribution networks, not just border zones, signalling that hybrid threats reach deep into the allied states’ civilian-industrial base. The dynamics reflect typical hybrid-warfare logic: stealth intrusion, establishing latent access, using civilian firms as pre-attack staging zones rather than deploying tanks or missiles. Although Slovakia did not officially attribute the activity explicitly to the Russian state at the time, the described methods and context match Russian cyber-warfare patterns.

Occurrence
2022-06-10
Publication
2022-06-09T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
SK
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2022-06-09T22:00:00Z

    The head of cyber-security at the Slovak utility company SSD, Tibor Paulen, warned that Russian hackers had undertaken efforts to place “footholds” inside Slovakia’s critical infrastructure—principally energy-distribution firms—since Russia’s invasion of Ukraine. The article states these intrusions were not yet destructive but were positions built inside networks of poorly secured companies, intended to pave the way for future attacks. Paulen said the attackers used social-engineering methods and targeted employees and suppliers—“the weakest link”—to install malware or gain access credentials. The geographic focus is Slovakia’s interior energy-distribution networks, not just border zones, signalling that hybrid threats reach deep into the allied states’ civilian-industrial base. The dynamics reflect typical hybrid-warfare logic: stealth intrusion, establishing latent access, using civilian firms as pre-attack staging zones rather than deploying tanks or missiles. Although Slovakia did not officially attribute the activity explicitly to the Russian state at the time, the described methods and context match Russian cyber-warfare patterns.