2022 DDoS attacks on Romania

Last updated

Beginning at 04:05 EEST on 29 April 2022, a series of multiple denial-of-service attack (DDoS) attacks were launched against several Romanian government, military, bank and mass media websites. Behind the attacks was the pro-Kremlin hacking group Killnet, who resorted to this in response to a declaration made by Florin Cîțu, the then-president of the senate of Romania, that Romania would provide Ukraine with military aid. The Russian Federation, who invaded the latter, publicly spoke against Western military support for Ukraine, stating that it would result in "lightning-fast retaliatory strikes". The DDoS attacks continued until 1 May.

Contents

Background

On 26 April 2022, the president of the chamber of deputies of Romania, Marcel Ciolacu, the prime minister, Nicolae Ciucă, and the minister of foreign affairs, Bogdan Aurescu, visited Kyiv in Ukraine to meet the Ukrainian president, Volodymyr Zelenskyy, the prime minister, Denys Shmyhal, and the president of the Verkhovna Rada, Ruslan Stefanchuk. In the meeting, Romania reiterated its support for Ukraine and its European integration aspirations, as well as committing to active involvement in the reconstruction of the country. [1]

The meeting was planned since as early as 13 April, with the Romanian delegation initially consisting of the president of the senate of Romania, Cîțu, and the president of the chamber of deputies, Marcel Ciolacu, both visiting Kyiv on 27 April at the invitation of Stefanchuk. [2] Prime Minister Ciucă justified the absence of Cîțu around the fact that there were two state visits separately planned, under condition by the safety measures imposed in Kyiv due to the 2022 Russian invasion of Ukraine. [3] Nevertheless, Florin Cîțu visited Kyiv by himself on 27 April 2022, [4] after which he stated that Romania should do more for Ukraine, supporting them with military equipment. [5]

Russia claimed that Western military support for Ukraine are "posing a threat to European security". The Russian president, Vladimir Putin, stated that "if someone intends to intervene in the ongoing events [Russian invasion of Ukraine] from the outside, and create strategic threats for Russia that are unacceptable to us, they should know that our retaliatory strikes will be lightning-fast". [6]

Cyber attack

On 29 April 2022, at 04:05 EEST, the websites of the Ministry of National Defence (MApN), the Romanian Border Police, the Government of Romania and of CFR Călători were taken down by a DDoS attack. According to the MApN, the cyberattack did not compromise the functioning of its website, but rather prevented user access to it. The government stated that IT specialists at the structures at governmental level are collaborating with experts from specialized institutions to restore access and identify the causes. In the meantime, CFR Călători issued alternative means of purchasing train tickets digitally. [7]

The Romanian Intelligence Service (SRI) stated that the hackers behind the cyberattack used network equipment from outside Romania. [8] The pro-Kremlin hacking group Killnet claimed the attacks through Telegram, stating that "the president of the Romanian Senate, Marcel Ciolacu issued a statement promising the Ukrainian authorities "maximum assistance" in supplying lethal weapons to Kyiv". Furthermore, they revealed a list of websites that it took down through the DDoS attack, where the website of OTP Bank (the Romanian division) was also listed. [9] The Directorate for Investigating Organized Crime and Terrorism (DIICOT) was notified in the case, and access to the websites was restored. [7] [10]

At 19:30 EEST, another DDoS attack was launched, this time on the website of the Ciolacu-led Social Democratic Party (PSD), taking it down in a similar manner. In response, the party's IT department quickly took action and restored access to the website within 15 minutes. [10]

In retaliation, Romania's National Cybersecurity Directorate (DNSC) published a list of 266 IP addresses involved in the 29 April DDoS attacks to its official website. On 30 April, at approximatively 2:30 EEST, this website had also been taken down through a further DDoS attack by the pro-Kremlin hacking group, with user access restored by 8:30 EEST. [11] Later the same day, a further DDoS attack took down the website of the Romanian Police. [12]

The pro-Kremlin hacking group threatened to take down another 300 Romanian websites in a similar manner, including websites of stores, military, government, mass-media, banks, hospitals, educational institutions, political parties, etc. Some websites using Moldovan (.md) domains were also included in the list. [13]

On 1 May 2022, Killnet took down the websites of seven Romanian airports (including those located in Bucharest, Cluj-Napoca, etc.), as well as of the TAROM airline and several news media websites, including Digi24, among others. [14]

It has been suspected that a Romanian resident in the United Kingdom helped Killnet take down Romanian websites, translating content in Romanian into Russian. They were put in custody. [15] In retaliation, Killnet threatened to "destroy Romania, the United Kingdom and Moldova" if they were not released within 48 hours. [16]

Public reactions

Romania's minister of defence, Vasile Dîncu described the cyberattacks as "symbolic attacks". [17] Marcel Ciolacu called his nominalization as "Senate president" by Killnet a mistake (as the presidency of the senate was held by Cîțu), [18] and stated that "if needed, Romania is ready both legally and morally to take this step [to supply Ukraine with military equipment]. At this moment [at the time of the first attacks], there is no decision". [19] In the meantime, the Romanian hacking group "Anonymous Romania" stated that it launched a counterattack against a Russian governmental website. [20]

Cîțu reacted as well: "First of all, I do not know what kind of hackers are those who do not know who the president of the Senate or the president of the Chamber of Deputies is [...]. Secondly, if we look at that [Killnet's] statement it is bizarre to have the picture of the President of the Chamber of Deputies, to have the correct name, but to mistake his position [...]. A simple search on Wikipedia and you would have found out who the president of the Senate is". [21]

See also

Related Research Articles

<span class="mw-page-title-main">National Liberal Party (Romania)</span> Romanian political party

The National Liberal Party is a social-conservative political party in Romania. Re-founded in mid January 1990, shortly after the Revolution of 1989 which culminated in the fall of communism in Romania, it claims the legacy of the major political party of the same name, active between 1875 and 1947 in the Kingdom of Romania. Based on this historical legacy, it often presents itself as the first formally constituted political party in the country and the oldest of its kind from the family of European liberal parties as well.

<span class="mw-page-title-main">Gheorghe Flutur</span> Romanian politician

Gheorghe Flutur is a Romanian politician, member of the National Liberal Party (PNL). He was also a member of the Liberal Democratic Party (PLD) as vice-president, since December 2006 until December 2007, then a member of the Democratic Liberal Party (PDL) until eventually returning to the PNL. Between December 2004 and November 2006, Flutur was the Minister of Agriculture in the Tăriceanu government. Between 2 and 10 April 2022, Flutur served as acting/ad interim president of the PNL, after the resignation of Florin Cîțu, until the election of Nicolae Ciucă.

<span class="mw-page-title-main">Romania–Ukraine relations</span> Bilateral relations

Romania–Ukraine relations are foreign relations between Romania and Ukraine. Diplomatic relations between both countries were established on February 9, 1918, and re-established in 1992. In 2020, it was announced that Romania would open a consulate for Ukraine in Sighetu Marmației.

<span class="mw-page-title-main">2024 European Parliament election in Romania</span>

The Romanian component of the 2024 European Parliament election will be held on 9 June 2024. This will be the fifth European Parliament election to be held in Romania.

<span class="mw-page-title-main">Marcel Ciolacu</span> Prime Minister of Romania since 2023

Ion-Marcel Ciolacu is a Romanian politician who currently serves as the Prime Minister of Romania. He is also the leader of the Social Democratic Party (PSD). As a previously little-known politician outside of Buzău County, where he owns a pastry shop and a consulting firm, Ciolacu came into national prominence when he became the deputy prime minister in 2018 in the cabinet of Prime Minister Mihai Tudose. Allegedly, he was given this office in order to report Tudose's activities to Liviu Dragnea, who had been unable to become prime minister himself and was wary of Tudose becoming a power player in the party. Ciolacu soon broke with Dragnea and became an ally of Tudose against Dragnea's leadership. After Tudose's resignation, Ciolacu was marginalized within PSD but still retained the leadership of PSD Buzău. Ciolacu once again returned to prominence in 2019 after Liviu Dragnea had been convicted on abuse of office and incitement to intellectual forgery charges, having to serve a 3 years, 6 months sentence. With the Social Democrats still controlling a majority both in the Chamber and in the Senate, Ciolacu won the position of President of the Chamber of Deputies, with 172 votes for and 120 against, previously held by Dragnea himself.

<span class="mw-page-title-main">Florin Cîțu</span> Prime Minister of Romania from 2020 to 2021

Florin Vasile Cîțu is a Romanian politician who served as Prime Minister of Romania between December 2020 and November 2021. Sometimes labeled as Romania's first libertarian Prime Minister, he was also the leader of the National Liberal Party (PNL) between September 2021 and April 2022.

<span class="mw-page-title-main">Nicolae Ciucă</span> 70th Prime Minister of Romania

Nicolae Ionel Ciucă is a Romanian politician and retired general of the Romanian Land Forces who is serving as the president of the Senate of Romania. Ideologically a conservative, he served as Prime Minister of Romania between 25 November 2021 and 12 June 2023 after receiving widespread parliamentary support on behalf of his own party, the National Liberal Party (PNL) along with the Social Democratic Party (PSD) and the Democratic Alliance of Hungarians in Romania (UDMR/RMDSZ). Since 10 April 2022, he has also been serving as the president of the National Liberal Party (PNL). On 12 June 2023, he resigned as Prime Minister, being temporarily replaced by Cătălin Predoiu.

<span class="mw-page-title-main">Cîțu Cabinet</span> 131st cabinet of Romania

The Cîțu Cabinet was the 131st government of Romania, led by the national liberal (PNL) Prime Minister Florin Cîțu. It was removed from office after a motion of no confidence passed by the Parliament with a record of 281 votes, the largest number of votes on a motion of no confidence since the Romanian Revolution.

Events from the year 2021 in Romania.

Diana Iovanovici Șoșoacă is a Romanian lawyer and far-right politician.

<span class="mw-page-title-main">2024 Romanian parliamentary election</span>

Parliamentary elections are scheduled to be held in Romania on 8 December 2024.

<span class="mw-page-title-main">2024 Romanian presidential election</span>

Presidential elections will be held in Romania on 15 September 2024, with a possible second round to be held on 29 September if no candidate receives over 50% of the vote. They will be the ninth presidential elections held in post-1989 Romania. As the Romanian Constitution allows a maximum of two presidential terms, incumbent President of Romania Klaus Iohannis, first elected in 2014 and then re-elected in 2019, is not eligible for re-election. His second term will formally end in December 2024.

A political crisis began on 1 September 2021 in Romania, engulfing both major coalition partners of the Cîțu Cabinet, namely the conservative-liberal National Liberal Party (PNL) and the progressive-liberal Save Romania Union (USR). The crisis also involved former prime minister Ludovic Orban (PNL), who was set to face Prime Minister Florin Cîțu (PNL) in a leadership election during the party congress on 25 September, with the latter eventually replacing the former. Orban would eventually resign from his position as President of the Chamber of Deputies, with him and his supporters subsequently splitting from the PNL, in order to form the Force of the Right (FD).

<span class="mw-page-title-main">Force of the Right</span> Political party in Romania

Force of the Right, sometimes translated as Right's Force or Right Force, is a liberal-conservative political party in Romania founded in December 2021 by Ludovic Orban, former National Liberal Party (PNL) president and former Prime Minister of Romania between 2019 and 2020, in opposition to the current leadership of the PNL which is currently officially led by Nicolae Ciucă and unofficially by Klaus Iohannis.

<span class="mw-page-title-main">Ciucă Cabinet</span> 132nd government of Romania

The Ciucă Cabinet was the 132nd government of Romania led by former Romanian Land Forces army general Nicolae Ciucă from 25 November 2021 to 12 June 2023.

<span class="mw-page-title-main">National Coalition for Romania</span> Grand coalition in Romania

The National Coalition for Romania, initially referred to as the Coalition for Resilience, Development and Prosperity, is a big tent grand coalition in Romania, which includes the Social Democratic Party (PSD) and the National Liberal Party (PNL). In addition, this grand coalition supports the presidency of Klaus Iohannis. The CNR also included the Democratic Alliance of Hungarians in Romania (UDMR/RMDSZ) until its withdrawal from the coalition in June 2023.

<span class="mw-page-title-main">2020–2024 legislature of the Romanian Parliament</span> Current legislature of the Parliament of Romania

The 2020–2024 legislature of the Romanian Parliament is the current legislature of the Parliament of Romania, elected on 6 December 2020. In the said election, no party won an outright majority, but the Social Democratic Party (PSD) remained the largest political force in the parliament, in opposition however. The National Liberal Party (PNL), the Save Romania Union (USR), and the Democratic Alliance of Hungarians in Romania (UDMR/RMDSZ) formed a coalition government. The USR ran within a political alliance it established with a smaller party, more specifically the Freedom, Unity and Solidarity Party (PLUS), which was eventually absorbed by the former. The Alliance for the Union of Romanians (AUR) entered parliament starting this legislature with an unexpected high score, gaining more popularity ever since.

Events from the year 2022 in Romania.

<span class="mw-page-title-main">2023 Romanian teachers' strike</span> 2023 general strike of teachers in Romania

On 22 May 2023, a general strike was called in Romania's education system, involving 150,000 teachers and another 60,000–70,000 teaching and auxiliary staff, demanding a rise in salaries in education by 25%. During the strike, there have been multiple attempts by syndicates and teachers to negotiate with the Romanian government, as well as with President Klaus Iohannis. Simultaneous demonstrations took place in Bucharest and several other major cities nationwide.

Herman Berkovits is a Romanian-Israeli pediatrist, best known for being the personal physician of the Israeli Prime Minister Benjamin Netanyahu. He is the honorary consul of Romania in Israel. He also served as an honorary advisor to the Romanian Prime Ministers Viorica Dăncilă, Ludovic Orban, Florin Cîțu, Nicolae Ciucă and the incumbent Marcel Ciolacu.

References

  1. ↑ "Imagini cu Marcel Ciolacu și Nicolae Ciucă la Kiev, cu Volodimir Zelenski. Vizita ar fi trebuit să aibă loc mâine, împreună cu Florin Cîțu" [Images of Marcel Ciolacu and Nicolae Ciucă in Kiev, with Volodimir Zelenski. The visit should have taken place tomorrow, together with Florin Cîțu]. Antena3 (in Romanian). Retrieved 29 April 2022.
  2. ↑ "Marcel Ciolacu și Florin Cîțu merg la Kiev pe 27 aprilie". www.digi24.ro (in Romanian). Retrieved 29 April 2022.
  3. ↑ "De ce nu a fost Florin Cîțu în Ucraina alături de Ciucă și Ciolacu. Explicația premierului". www.antena3.ro (in Romanian). Retrieved 29 April 2022.
  4. ↑ "Primele imagini cu Florin Cîțu în Ucraina: "Ceea ce am văzut deschide ochii lumii asupra acțiunilor Rusiei"". www.antena3.ro (in Romanian). Retrieved 29 April 2022.
  5. ↑ "Marcel Ciolacu, despre trimiterea de arme în Ucraina: "Dacă este nevoie, România este pregătită să facă acest pas"". www.antena3.ro (in Romanian). Retrieved 29 April 2022.
  6. ↑ "Russia says pumping Ukraine with weapons is threat to European security". Reuters. 28 April 2022. Retrieved 29 April 2022.
  7. 1 2 "Val de atacuri cibernetice în România. Vizate mai multe instituții, între care Guvernul și Ministerul Apărării / Atacurile, revendicate de hackerii pro-ruși de la Killnet". economie.hotnews.ro (in Romanian). Retrieved 29 April 2022.
  8. ↑ "Atacurile cibernetice care au vizat Guvernul și MApN. SRI: Hackerii au folosit echipamente de rețea din afara României, profitând de vulnerabilități ale site-urilor". www.hotnews.ro (in Romanian). Retrieved 29 April 2022.
  9. ↑ "Cine este gruparea de hackeri Killnet care a atacat site-urile Guvernului și Armatei României". economie.hotnews.ro (in Romanian). Retrieved 29 April 2022.
  10. 1 2 "Site-ul PSD inactiv după ce a fost atacat de hakerii ruși de la Killnet". www.antena3.ro (in Romanian). Retrieved 29 April 2022.
  11. ↑ "Continuă seria de atacuri de tip DDoS asupra site-urilor românești". www.antena3.ro (in Romanian). Retrieved 30 April 2022.
  12. ↑ "UPDATE Site-ul Poliției Române a fost atacat cibernetic "într-un mod similar ca celelalte instituții" (surse)/ Problema a fost remediată în aproximativ o oră de la anunțul Poliției/ Hackerii pro-ruși Killnet au amenințat că vor ataca peste 300 de entități din România". G4 Media (in Romanian). 30 April 2022. Retrieved 30 April 2022.
  13. ↑ "Gruparea Killnet amenință că va ataca cibernetic alte aproape 300 de site-uri din România". economie.hotnews.ro (in Romanian). Retrieved 1 May 2022.
  14. ↑ "Site-urile marilor aeroporturi din România nu funcționează. Hackerii ruși de la Killnet revendică atacul". Digi24 (in Romanian). Retrieved 1 May 2022.
  15. ↑ "Un român din Marea Britanie, suspectat că a ajutat gruparea de hackeri ruși Killnet pentru a ataca site-uri din România. Bode: "Cetăţeanul este în custodia autorităţilor şi este audiat"". G4 Media (in Romanian). 3 May 2022. Retrieved 4 May 2022.
  16. ↑ "Killnet confirmă sprijinul românului Ioan Feher și amenință că va "distruge România, Marea Britanie și Moldova" dacă nu va fi eliberat: "Dacă susține Rusia, nu înseamnă că e un criminal"/ Este vizat Ministerul Sănătății". G4 Media (in Romanian). 3 May 2022. Retrieved 4 May 2022.
  17. ↑ "Reacția lui Vasile Dîncu după ce grupul pro-rus Killnet a atacat cibernetic România: "Este un atac simbolic"". Stirileprotv.ro (in Romanian). Retrieved 30 April 2022.
  18. ↑ "Ciolacu spune că hackerii ruși l-au confundat cu Cîțu: E o greșeală acolo, sunt și eu". www.digi24.ro (in Romanian). Retrieved 30 April 2022.
  19. ↑ "Ce spune Marcel Ciolacu, președintele Camerei Deputaților, despre motivele invocate de hackerii Killnet: E o greșeală acolo". ZF.ro (in Romanian). Retrieved 30 April 2022.
  20. ↑ "Grupul de hackeri Anonymous România susține că a atacat un site guvernamental din Rusia ca răspuns la acțiunile grupării ruse Killnet". G4 Media (in Romanian). 29 April 2022. Retrieved 30 April 2022.
  21. ↑ "Cîțu, deranjat că a fost confundat cu Ciolacu: Ce hackeri sunt ăia care nu știu cine e șeful Senatului? Dădeai search pe Wikipedia". www.digi24.ro (in Romanian). Retrieved 2 May 2022.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.