2022 cyberattacks on Romania

Last updated

Beginning 29 April 2022, at 04:05 EEST, until 1 May, a series of multiple DDoS attacks were launched against several Romanian government, military, bank and mass media websites. Behind the attacks was the pro-Kremlin hacking group Killnet, who resorted to this in response to a declaration made by Florin Cîțu, the then-President of the Senate of Romania, that Romania would provide Ukraine with military aid. The Russian Federation, who invaded the latter, publicly spoke against Western military support for Ukraine, stating that it would result in "lightning-fast retaliatory strikes".

Contents

Background

On 26 April 2022, the President of the Chamber of Deputies of Romania Marcel Ciolacu, Prime Minister Nicolae Ciucă and Minister of Foreign Affairs Bogdan Aurescu visited Kyiv, Ukraine, to meet with Ukrainian President Volodymyr Zelenskyy, Ukrainian Prime Minister Denys Shmyhal, and with the president of the Verkhovna Rada, Ruslan Stefanchuk. In the meeting, Romania reiterated its support for Ukraine and its European integration aspirations, as well as committing to active involvement in the reconstruction of the country. [1]

The meeting was planned since as early as 13 April, with the Romanian delegation initially consisting of the President of the Senate Florin Cîțu and the President of the Chamber of Deputies Marcel Ciolacu, both visiting Kyiv on 27 April at the invitation of Stefanchuk. [2] Prime Minister Ciucă justified the absence of Cîțu around the fact that there were two state visits separately planned, under condition by the safety measures imposed in Kyiv due to the 2022 Russian invasion of Ukraine. [3] Nevertheless, Florin Cîțu visited Kyiv by himself on 27 April 2022, [4] after which he stated that Romania should do more for Ukraine, supporting them with military equipment. [5]

Russia claimed that Western military support for Ukraine are "posing a threat to European security". Russian President Vladimir Putin stated that "if someone intends to intervene in the ongoing events [Russian invasion of Ukraine] from the outside, and create strategic threats for Russia that are unacceptable to us, they should know that our retaliatory strikes will be lightning-fast". [6]

Cyberattack

On 29 April 2022, at 04:05 EEST, the websites of the Ministry of National Defence (MApN), the Romanian Border Police, the Government of Romania, and of CFR Călători were taken down by a DDoS attack. According to the MApN, the cyberattack did not compromise the functioning of its website, but rather prevented user access to it. The government stated that IT specialists at the structures at governmental level are collaborating with experts from specialized institutions to restore access and identify the causes. In the meantime, CFR Călători issued alternative means of purchasing train tickets digitally. [7]

The Romanian Intelligence Service (SRI) stated that the hackers behind the cyberattack used network equipment from outside Romania. [8] The pro-Kremlin hacking group Killnet claimed the attacks through Telegram, stating that "the president of the Romanian Senate, Marcel Ciolacu issued a statement promising the Ukrainian authorities "maximum assistance" in supplying lethal weapons to Kyiv". Furthermore, they revealed a list of websites that it took down through the DDoS attack, where the website of OTP Bank (the Romanian division) was also listed. [9] The Directorate for Investigating Organized Crime and Terrorism (DIICOT) was notified in the case, and access to the websites was restored. [7] [10]

At 19:30 EEST, another DDoS attack was launched, this time on the website of the Ciolacu-led Social Democratic Party (PSD), taking it down in a similar manner. In response, the party's IT department quickly took action and restored access to the website within 15 minutes. [10]

In retaliation, Romania's National Cybersecurity Directorate (DNSC) published a list of 266 IP addresses involved in the 29 April DDoS attacks to its official website. On 30 April, at approximatively 2:30 EEST, this website had also been taken down through a further DDoS attack by the pro-Kremlin hacking group, with user access restored by 8:30 EEST. [11] Later the same day, a further DDoS attack took down the website of the Romanian Police. [12]

The pro-Kremlin hacking group threatened to take down another 300 Romanian websites in a similar manner, including websites of stores, military, government, mass-media, banks, hospitals, educational institutions, political parties, etc. Some websites using Moldovan (.md) domains were also included in the list. [13]

On 1 May 2022, Killnet took down the websites of seven Romanian airports (including those located in Bucharest, Cluj-Napoca, etc.), as well as of the TAROM airline and several news media websites, including Digi24, among others. [14]

It has been suspected that a Romanian resident in the United Kingdom helped Killnet take down Romanian websites, translating content in Romanian language to Russian language. They were put in custody. [15] In retaliation, Killnet threatened to "destroy Romania, the United Kingdom and Moldova" if they are not released in 48 hours. [16]

Public reactions

Romania's Minister of Defence, Vasile Dîncu described the cyberattacks as "symbolic attacks". [17] The President of the Chamber of Deputies of Romania Marcel Ciolacu called his nominalization as "Senate president" by Killnet a mistake (as the presidency of the Senate was held by Florin Cîțu), [18] and stated that "if needed, Romania is ready both legally and morally to take this step [to supply Ukraine with military equipment]. At this moment [at the time of the first attacks], there is no decision". [19] In the meantime, the Romanian hacking group "Anonymous Romania" stated that it launched a counterattack against a Russian governmental website. [20]

Florin Cîțu, the president of the Senate, reacted as well: "First of all, I do not know what kind of hackers are those who do not know who the president of the Senate or the president of the Chamber of Deputies is [...]. Secondly, if we look at that [Killnet's] statement it is bizarre to have the picture of the President of the Chamber of Deputies, to have the correct name, but to mistake his position [...]. A simple search on Wikipedia and you would have found out who the president of the Senate is". [21]

See also

Related Research Articles

National Liberal Party (Romania) Romanian political party

The National Liberal Party is the largest centre-right conservative-liberal and liberal-conservative political party in Romania. Re-founded in mid January 1990, shortly after the Revolution of 1989 which culminated in the fall of communism in Romania, it claims the legacy of the major political party of the same name, active between 1875 and 1947 in the Kingdom of Romania. Based on this legacy, it often presents itself as the first formally constituted political party in the country and the oldest party from the family of European liberal parties.

Romania–Ukraine relations Bilateral relations

Romania–Ukraine relations are foreign relations between Romania and Ukraine. Diplomatic relations between both countries were established on February 9, 1918 and re-established in 1992. Romania has an embassy in Kyiv and two Consulates-General. Ukraine has an embassy in Bucharest and had a consulate in Suceava that closed down in 2014 due to lack of funding. In 2020, it was announced that Romania would open a consulate for Ukraine in Sighetu Marmației.

Cyberwarfare by Russia includes denial of service attacks, hacker attacks, dissemination of disinformation and propaganda, participation of state-sponsored teams in political blogs, internet surveillance using SORM technology, persecution of cyber-dissidents and other active measures. According to investigative journalist Andrei Soldatov, some of these activities were coordinated by the Russian signals intelligence, which was part of the FSB and formerly a part of the 16th KGB department. An analysis by the Defense Intelligence Agency in 2017 outlines Russia's view of "Information Countermeasures" or IPb as "strategically decisive and critically important to control its domestic populace and influence adversary states", dividing 'Information Countermeasures' into two categories of "Informational-Technical" and "Informational-Psychological" groups. The former encompasses network operations relating to defense, attack, and exploitation and the latter to "attempts to change people's behavior or beliefs in favor of Russian governmental objectives."

Florin Cîțu Prime Minister of Romania from 2020 to 2021

Florin Vasile Cîțu is a Romanian politician who served as Prime Minister of Romania between December 2020 and November 2021. Between September 2021 and April 2022, he was the leader of the National Liberal Party (PNL).

Vlad Voiculescu Romanian politician

Vlad Vasile Voiculescu is a Romanian politician and former Romanian Minister of Health in the Cîțu Cabinet whose term lasted from 23 December 2020 until he was revoked on 14 April 2021 by PNL Prime Minister Florin Cîțu. He formerly served in the same position in the Cioloș Cabinet between May 2016 and January 2017.

Nicolae Ciucă 70th Prime Minister of Romania

Nicolae Ionel Ciucă is a Romanian politician and retired general of the Romanian Land Forces. He has been serving as Prime Minister of Romania since 25 November 2021 after receiving widespread parliamentary support. Additionally, since 10 April 2022, he also serves as the president of the National Liberal Party (PNL).

Cîțu Cabinet

The Cîțu Cabinet was the 131st government of Romania, led by the national liberal (PNL) Prime Minister Florin Cîțu. It was removed from office after a motion of no confidence passed by the Parliament with a record of 281 votes, the largest number of votes on a motion of no confidence since the Romanian Revolution.

Events from the year 2021 in Romania.

Virgil-Daniel Popescu is a Romanian politician who has been serving as Minister of Energy in the Ciucă Cabinet, led by Prime Minister Nicolae Ciucă, as of 25 November 2021. He previously served in the first and second cabinets led by Ludovic Orban, as well as in the cabinet led by Florin Cîțu.

Diana Iovanovici Șoșoacă is a Romanian lawyer and far-right politician. She gained notorious popularity in 2020 after she published several messages against COVID-19 restriction measures on social media sites such as Facebook. Iovanovici Șoșoacă is a former member of the Alliance for the Union of Romanians (AUR) and part of the Senate of Romania for the Iași County since 21 December 2020. She later said that she did not want to enter the Parliament of Romania but that she was forced by other people who pressured her. On 10 February 2021, she was excluded from AUR's parliamentary group after AUR members Claudiu Târziu and Sorin Lavric proposed her exclusion for not following the party's strategy. Subsequently, on 30 May 2022, she joined S.O.S. Romania, a party founded in November 2021. Șoșoacă is one of the main anti-vaccine figures of the COVID-19 pandemic in Romania. She also supports a Romanian withdrawal from the EU and holds an anti-immigration rhetoric centered on the Syrian-born Romanian physician Raed Arafat.

The next Romanian legislative elections must be held at the latest before 21 March 2025, that is three months after the term of the incumbent legislature of the Romanian Parliament expires.

Presidential elections are going to be held in Romania in either mid- or late November 2024, with an eventual second round to be held in late November or early December 2024 as well. As the Romanian Constitution allows a maximum of two non-consecutive presidential terms, incumbent President of Romania Klaus Iohannis, first elected in 2014 and then re-elected in 2019, is not eligible for re-election anymore.

Dan Vîlceanu is a Romanian deputy, elected in 2016. On 25 November 2021, he was sworn in as Minister of Investments and European Projects in the Ciucă Cabinet.

A political crisis began on 1 September 2021 in Romania, engulfing both major coalition partners of the Cîțu Cabinet, namely the conservative-liberal National Liberal Party (PNL) and the progressive-liberal Save Romania Union (USR). The crisis also involved former prime minister Ludovic Orban (PNL), who was set to face Prime Minister Florin Cîțu (PNL) in a leadership election during the party congress on 25 September, with the latter eventually replacing the former. Orban would eventually resign from his position as President of the Chamber of Deputies, with him and his supporters subsequently splitting from the PNL, in order to form the Force of the Right (FD).

Ciucă Cabinet Incumbent government of Romania

The Ciucă Cabinet is the 132nd and current government of Romania led by former Romanian Land Forces army general Nicolae Ciucă (PNL) since 25 November 2021.

The National Coalition for Romania is a grand coalition in Romania, which includes the Social Democratic Party (PSD), the National Liberal Party (PNL), and the Democratic Alliance of Hungarians in Romania (UDMR/RMDSZ). In addition, this grand coalition supports the incumbent Romanian President Klaus Iohannis as well, who, on his turn, praised the coalition for its activity in early 2022, stating that "the Romanian political class has shown democratic maturity".

2020–2024 legislature of the Romanian Parliament Current legislature of the Parliament of Romania

The 2020–2024 legislature of the Romanian Parliament is the current legislature of the Parliament of Romania, elected on 6 December 2020. In the said election, no party won an outright majority, but the Social Democratic Party (PSD) remained the largest political force in the parliament, in opposition however. The National Liberal Party (PNL), the Save Romania Union (USR), and the Democratic Alliance of Hungarians in Romania (UDMR/RMDSZ) formed a coalition government. The USR ran within a political alliance it established with a smaller party, more specifically the Freedom, Unity and Solidarity Party (PLUS), which was eventually absorbed by the former. The Alliance for the Union of Romanians (AUR) entered parliament starting this legislature with an unexpected high score, gaining more popularity ever since.

Events from the year 2022 in Romania.

2022 Transnistria attacks 2022 attacks in Moldovas breakaway region of Transnistria

The 2022 Transnistria attacks were a series of five incidents reported in the Eastern European breakaway state of Transnistria, legally recognized as part of Moldova, that occurred in 2022 between 25 and 27 April and again on 6 May. No casualties were reported, but material damage did occur.

Killnet is a pro-Russian hacker group known for its DoS and DDoS attacks on several government institutions in several countries during the 2022 Russian invasion of Ukraine.

References

  1. ↑ "Imagini cu Marcel Ciolacu și Nicolae Ciucă la Kiev, cu Volodimir Zelenski. Vizita ar fi trebuit să aibă loc mâine, împreună cu Florin Cîțu". www.antena3.ro (in Romanian). Retrieved 2022-04-29.
  2. ↑ "Marcel Ciolacu și Florin Cîțu merg la Kiev pe 27 aprilie". www.digi24.ro (in Romanian). Retrieved 2022-04-29.
  3. ↑ "De ce nu a fost Florin Cîțu în Ucraina alături de Ciucă și Ciolacu. Explicația premierului". www.antena3.ro (in Romanian). Retrieved 2022-04-29.
  4. ↑ "Primele imagini cu Florin Cîțu în Ucraina: "Ceea ce am văzut deschide ochii lumii asupra acțiunilor Rusiei"". www.antena3.ro (in Romanian). Retrieved 2022-04-29.
  5. ↑ "Marcel Ciolacu, despre trimiterea de arme în Ucraina: "Dacă este nevoie, România este pregătită să facă acest pas"". www.antena3.ro (in Romanian). Retrieved 2022-04-29.
  6. ↑ Reuters (2022-04-28). "Russia says pumping Ukraine with weapons is threat to European security". Reuters. Retrieved 2022-04-29.
  7. 1 2 "Val de atacuri cibernetice în România. Vizate mai multe instituții, între care Guvernul și Ministerul Apărării / Atacurile, revendicate de hackerii pro-ruși de la Killnet". economie.hotnews.ro (in Romanian). Retrieved 2022-04-29.
  8. ↑ "Atacurile cibernetice care au vizat Guvernul și MApN. SRI: Hackerii au folosit echipamente de rețea din afara României, profitând de vulnerabilități ale site-urilor". www.hotnews.ro (in Romanian). Retrieved 2022-04-29.
  9. ↑ "Cine este gruparea de hackeri Killnet care a atacat site-urile Guvernului și Armatei României". economie.hotnews.ro (in Romanian). Retrieved 2022-04-29.
  10. 1 2 "Site-ul PSD inactiv după ce a fost atacat de hakerii ruși de la Killnet". www.antena3.ro (in Romanian). Retrieved 2022-04-29.
  11. ↑ "Continuă seria de atacuri de tip DDoS asupra site-urilor românești". www.antena3.ro (in Romanian). Retrieved 2022-04-30.
  12. ↑ "UPDATE Site-ul Poliției Române a fost atacat cibernetic "într-un mod similar ca celelalte instituții" (surse)/ Problema a fost remediată în aproximativ o oră de la anunțul Poliției/ Hackerii pro-ruși Killnet au amenințat că vor ataca peste 300 de entități din România". G4Media.ro (in Romanian). 2022-04-30. Retrieved 2022-04-30.
  13. ↑ "Gruparea Killnet amenință că va ataca cibernetic alte aproape 300 de site-uri din România". economie.hotnews.ro (in Romanian). Retrieved 2022-05-01.
  14. ↑ "Site-urile marilor aeroporturi din România nu funcționează. Hackerii ruși de la Killnet revendică atacul". www.digi24.ro (in Romanian). Retrieved 2022-05-01.
  15. ↑ "BREAKING Un român din Marea Britanie, suspectat că a ajutat gruparea de hackeri ruși Killnet pentru a ataca site-uri din România. Bode: „Cetăţeanul este în custodia autorităţilor şi este audiat"". G4Media.ro (in Romanian). 2022-05-03. Retrieved 2022-05-04.
  16. ↑ "Killnet confirmă sprijinul românului Ioan Feher și amenință că va "distruge România, Marea Britanie și Moldova" dacă nu va fi eliberat: "Dacă susține Rusia, nu înseamnă că e un criminal"/ Este vizat Ministerul Sănătății". G4Media.ro (in Romanian). 2022-05-03. Retrieved 2022-05-04.
  17. ↑ "Reacția lui Vasile Dîncu după ce grupul pro-rus Killnet a atacat cibernetic România: „Este un atac simbolic"". Stirileprotv.ro (in Romanian). Retrieved 2022-04-30.
  18. ↑ "Ciolacu spune că hackerii ruși l-au confundat cu Cîțu: E o greșeală acolo, sunt și eu". www.digi24.ro (in Romanian). Retrieved 2022-04-30.
  19. ↑ "Ce spune Marcel Ciolacu, președintele Camerei Deputaților, despre motivele invocate de hackerii Killnet: E o greșeală acolo". ZF.ro (in Romanian). Retrieved 2022-04-30.
  20. ↑ "Grupul de hackeri Anonymous România susține că a atacat un site guvernamental din Rusia ca răspuns la acțiunile grupării ruse Killnet". G4Media.ro (in Romanian). 2022-04-29. Retrieved 2022-04-30.
  21. ↑ "Cîțu, deranjat că a fost confundat cu Ciolacu: Ce hackeri sunt ăia care nu știu cine e șeful Senatului? Dădeai search pe Wikipedia". www.digi24.ro (in Romanian). Retrieved 2022-05-02.
This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.