Russian hackers tried to steal the secret plan of Germany in case of war with Russia

In mid -June, the Hesse company, which provides the Bundesver Satellite Communications, was the victim of cyberattack. Initially, it was envisaged that the leakage of secret information occurred, moreover, the prompt information was likely, which potentially threatened the safety of the Bundeswehr missions.

"According to the available data, the operational traffic of the Bundeswehr data and its own IT networks of the Federal Ministry of Defense was not injured," said the Ministry of Defense representative in response to a comment request. It is assumed that a digital attack on Hessen's company was made using a warrior program. In such attacks, intruders usually encrypt data and IT systems of victims and release them only after paying out.

According to safety sources, preliminary results indicate that the attack was used in the attack, which is attributed to the Russian hacker group. Another cyberincident that happened in June also touched the Bundesver: hackers attacked an engineering company in Lower Saxony.

The company has concluded a contract for the construction of objects for the Bundeswehr Operational Command and, among other things, is responsible for the implementation of the provisions of the Secret "German Operational Plan". This document regulates the issues of national and allied defense, in particular, the deployment and transfer of troops within the Federal Republic during periods of tension or war. It is unknown whether this secret information was stolen by hackers.

In any case, the authorities suggest that the attackers acted from Russia. German security bodies have been suspected for some time that cybercriminals, the so -called "hactactives" and Russian state bodies are increasingly interacting with each other. It is noteworthy that cybercriminals constantly attack goals in Europe, which are also of interest to Russian special services.

These include the companies of the critical infrastructure sector, the defense sector contractors, research institutes, as well as political and public organizations. Thus, the theory appeared in the security authorities: what at first glance looks like a regular cybercrime, it can actually be a spy operation - or hackers could simply transmit confidential data to the Russian special services. ZCSBW Cybersecurity Center (ZCSBW) is responsible for cybersecurity in Germany's Armed Forces.

Established in 2017, this body has about 600 servicemen and civilian employees who monitor the Bundeswehr activity in cyberspace. The Federal Office of Military Counterintelligence (BAMAD) is also responsible for counteracting electronic espionage attacks.

In the spring of 2025, Colonel Kubitz, the Head of the Bundeswehice Cyber ​​Security Service, stated that the Bundesver "regularly", and since 2022 the number of so-called DDOS-attacks has increased significantly-mass requests capable of overloading and paralyzing the work of the Bundesver systems. Earlier, Focus wrote that hackers from North Korea also operate in cyberspace.