Yesterday, 7 April, the operation of APT28, a cyber espionage unit run by Russia’s military intelligence (GRU), was exposed as a result of extensive international cooperation, in which Estonia also participated. The aim of the operation was to exploit routers in Western countries and to steal login credentials, personal data and other sensitive information. A small number of routers belonging to Estonian users were also compromised.
Foreign Minister Margus Tsahkna commended the Estonian Internal Security Service for its participation in the operation, which resulted in blocking the unit’s access to routers and preventing hostile cyber espionage activities by the GRU. “Russia continues to systematically exploit the cyber space of Western countries in order to obtain sensitive information and undermine our sense of security,” Tsahkna noted.
The minister added that cyberattacks play a significant role in Russia’s broader hybrid war against Western countries, aimed at destabilising and dividing our societies through sustained subversive activities, thereby supporting Russia’s war effort in Ukraine. “We must continue close cooperation with international partners to protect Estonia’s networks and to detect malicious attempts at destabilisation.”
Director General of the Estonian Internal Security Service Margo Palloson noted that cyber espionage has become one of the most commonly used intelligence-gathering methods by hostile intelligence services.
“International cooperation is therefore of crucial importance in countering state-sponsored actors,” he stressed.
He added that, in order to prevent such hostile activity, security updates must be installed without delay and outdated devices that no longer receive security updates must be replaced. Cybersecurity is important at both the individual and organisational level.
In September 2024, Estonia attributed cyberattacks carried out against the Estonian state in 2020 to members of Unit 29155 of Russia’s military intelligence (GRU). This marked the first time Estonia had attributed cyberattacks against the state to specific perpetrators.
This press release was prepared in cooperation with the Estonian Internal Security Service.
Additional information
Communication Department
[email protected]
www.vm.ee | @MFAestonia