Sweden Faces Pro-Russian Cyber Threats to Critical Infrastructure

The Swedish government has identified a pro-Russian group linked to Russia’s security and intelligence services as the perpetrator behind a thwarted cyberattack on a thermal power plant in western Sweden in early 2025. Civil Defense Minister Carl-Oskar Bohlin announced that the attack was unsuccessful due to effective security measures in place at the facility. He emphasized that the incident illustrates a shift in tactics, with attackers moving from simple denial-of-service (DDoS) attacks to more sophisticated attempts aimed at disrupting operational technology systems that control critical infrastructure.

EuronewsTechCrunchSweden blames pro-Russian group for cyberattack on energy infrastructure

This incident is part of a broader pattern of cyberattacks attributed to Russian actors targeting critical infrastructure across Europe, particularly following Russia's full-scale invasion of Ukraine in February 2022. Officials from Poland, Norway, Denmark, and Latvia have reported similar attacks, indicating a coordinated effort to undermine support for Ukraine and create societal discord. Bohlin noted that these attacks are not isolated incidents but part of over 150 documented acts of sabotage linked to Russia since the invasion.

Sweden blames pro-Russian group for cyberattack on energy infrastructure

The targeting of operational technology systems poses significant risks, as these systems manage physical functions in essential services such as energy and water supply. Experts, including Pontus Johnson from KTH Royal Institute of Technology, have highlighted that the complexity of these attacks requires more skilled hackers, especially with the rise of artificial intelligence facilitating such operations. Bohlin stated that the Swedish government is taking these threats seriously and aims to raise public awareness to bolster cybersecurity and collective resilience.

Euronews

Carl-Oskar Bohlin remarked, “The attack illustrates that we are dealing with an antagonist who does not hesitate to create physical disruptions that can be likened to sabotage of our physical infrastructure.” He also emphasized the importance of publicizing these threats to signal to potential attackers that Sweden is vigilant and prepared. The Swedish government remains committed to supporting Ukraine amidst these escalating cyber threats.

Euronews

While the Swedish government has taken a firm stance against these cyber threats, critics argue that the focus on external threats may overshadow internal vulnerabilities in Sweden's cybersecurity infrastructure. Some experts suggest that more proactive measures are needed to enhance the resilience of critical systems against such sophisticated attacks.

TechCrunch

There is a discrepancy in the timeline of reported cyber incidents. While Bohlin stated the thwarted attack occurred in early 2025, earlier reports indicated that similar attacks had been ongoing since late 2024. Additionally, the specific identity of the targeted thermal power plant has not been disclosed, leaving gaps in understanding the full scope of the threat.

Euronews

• “The Swedish Security Service handled the case and was able to identify the actor behind it, which has ties to Russian intelligence and security services,” — Carl-Oskar Bohlin, Civil Defense Minister

Euronews

• “Pro-Russian groups that once carried out denial-of-service attacks are now attempting destructive cyber attacks against organizations in Europe,” — Carl-Oskar Bohlin, Civil Defense Minister

TechCrunch

• “This points to a changed, more risk-prone and more reckless behaviour from Russia, which could lead to potentially very harmful effects on society,” — Carl-Oskar Bohlin, Civil Defense Minister

Euronews

As Sweden continues to navigate the complexities of cybersecurity in the face of external threats, the government remains focused on enhancing its defenses and supporting international allies.

TechCrunch