Sweden blames Russian hackers for attempting ‘destructive’ cyberattack on thermal plant

In a recent announcement, the Swedish government revealed that hackers with ties to the Russian government attempted to undermine operations at a thermal power plant in the country last year. While the attack was thwarted, officials warn that such hybrid threats, which merge cyber and physical elements, are becoming increasingly perilous. During a press briefing on Wednesday, Carl-Oskar Bohlin, Sweden's minister of civil defense, stated that the incident occurred in early 2025 and was traced back to individuals linked to Russian intelligence and security services. Bohlin emphasized a growing trend where pro-Russian hacker groups, previously known for denial-of-service attacks, are now escalating their efforts to carry out destructive cyber operations against European entities. Although the minister did not disclose the specific plant targeted, he confirmed that the attack was successfully blocked thanks to an effective internal protection system. Bohlin expressed concern over the reckless nature of these cyber threats, highlighting a shift towards more dangerous tactics by the hackers. A spokesperson for the Russian government has yet to respond to inquiries regarding the allegations. This incident adds to a series of recent cyberattacks on critical infrastructure attributed to Russian hackers, who are increasingly focusing on energy and water systems with the intention of disrupting vital public services. Before the incident in Sweden, Russia was implicated in a cyberattack aiming to disrupt Poland's power grid in December 2025. Additionally, earlier this year, hackers from Russia temporarily seized control of a dam in Norway, causing the release of millions of gallons of water. In another concerning event, a cyberattack on a municipal energy company in Lviv, Ukraine, left numerous apartments without heat for two days during severe winter conditions, with some evidence suggesting Russian involvement, though confirmation remains elusive. The history of such attacks dates back to 2015 when Russian cyber operations caused major disruptions to Ukraine's power infrastructure.