The German government’s IT network is under an “ongoing” cyberattack, the parliamentary committee on intelligence affairs said Thursday, without confirming a media report that Russian hackers were behind the assault.
“It is a real cyberattack on parts of the government system. It’s an ongoing process, an ongoing attack,” said Armin Schuster, chairman of the committee, adding that no further details could be given to avoid passing crucial information on to the attackers.
Interior Minister Thomas de Maiziere said the hacking was “a technically sophisticated attack that had been planned for some time”, adding that it had been brought under control.
The highly professional assault had been monitored by the security agencies in order to gain insights into the mode of attack and its targets, said de Maiziere.
German news agency DPA said Thursday, a day after first reporting the attack, that the likely authors were the Russian cyber espionage group “Snake”, citing unnamed security sources.
Also known as “Turla” or “Uruburos”, the group, which targets state departments and embassies worldwide, is believed to have links to Russian intelligence, according to German media.
DPA had earlier pointed at the Russian hacker group APT28, which has been accused of attacks on Hillary Clinton’s 2016 presidential campaign as well as on Germany’s parliamentary IT system in 2015.
German security authorities had only detected the online spying in December, DPA has reported, adding that it had infiltrated the systems of the foreign and interior ministries.
Konstantin von Notz, deputy of the committee, complained it was “completely unacceptable” that members of the oversight body only learnt of the attack through the media.
Top security officials had repeatedly warned during Germany’s 2017 general election campaign that Russian hackers may seek to influence or disrupt the polls.