Lyce · Hybrid Watch

hw_c8e9d099f364cabe

Pro-Russia hacker group targets Finnish Parliament and PM’s website with DoS attacks.

On 4 April 2023 Finland’s national broadcaster Yle reported that the pro-Russian hacker group NoName057(16) claimed responsibility via Telegram for a series of denial-of-service (DoS) attacks on the Finnish Parliament’s website and the personal website of outgoing Prime Minister Sanna Marin. The attacks came on the day Finland officially became the 31st member of NATO, underscoring their strategic timing. Finnish authorities confirmed the incident and said the attack was being investigated by the National Cyber Security Centre and the National Bureau of Investigation. Although no physical infrastructure was damaged, the targeting of a core state institution at a geopolitical turning point qualifies the event as hybrid-warfare pressure rather than a routine hack. Helsinki is the political centre of Finland and being cyber-attacked from state-aligned actors raises implications for sovereignty. The dynamic here shows how cyber operations can act as signalling tools in hybrid aggression—testing resilience, public trust, digital defences and institutional processes. Finland responded by reinforcing its cyber-defence posture, including increased monitoring of state websites and coordination with allied cyber partners. The incident helped shift the Finnish security paradigm toward the understanding that cyberattack-and-disruption complement maritime, airspace and infrastructure threats in the hybrid-warfare spectrum.

Occurrence
2023-04-04
Publication
2023-04-03T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
FI
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2023-04-03T22:00:00Z

    On 4 April 2023 Finland’s national broadcaster Yle reported that the pro-Russian hacker group NoName057(16) claimed responsibility via Telegram for a series of denial-of-service (DoS) attacks on the Finnish Parliament’s website and the personal website of outgoing Prime Minister Sanna Marin. The attacks came on the day Finland officially became the 31st member of NATO, underscoring their strategic timing. Finnish authorities confirmed the incident and said the attack was being investigated by the National Cyber Security Centre and the National Bureau of Investigation. Although no physical infrastructure was damaged, the targeting of a core state institution at a geopolitical turning point qualifies the event as hybrid-warfare pressure rather than a routine hack. Helsinki is the political centre of Finland and being cyber-attacked from state-aligned actors raises implications for sovereignty. The dynamic here shows how cyber operations can act as signalling tools in hybrid aggression—testing resilience, public trust, digital defences and institutional processes. Finland responded by reinforcing its cyber-defence posture, including increased monitoring of state websites and coordination with allied cyber partners. The incident helped shift the Finnish security paradigm toward the understanding that cyberattack-and-disruption complement maritime, airspace and infrastructure threats in the hybrid-warfare spectrum.