Findings regarding hacker attacks
22.06.2021
The findings of the Internal Security Agency and the Military Counterintelligence Service show that the UNC1151 group is behind the recent hacker attacks that hit Poland. The secret services have reliable information at their disposal which this group with the activities of the Russian secret services.
The findings of the Polish counterintelligence services show that the target of the recent social engineering attacks was over 4,000 accounts of Polish e-mail users. Among the attacked, there are over 100 accounts used by persons discharging public functions. Among the attacked are members of the former and present government, deputies, senators, and local government officials. The attack affected people from various political backgrounds, as well as media and NGO workers.
The above-mentioned list also includes the address used by Minister Michal Dworczyk. Cybersecurity services analyzed several messages sent to the minister's address that could have been used for potential phishing, and several foreign logins to the mailbox used by the Minister Dworczyk were also noted.
All the information obtained so far indicates that the actions of the UNC1151 group, which have affected Poland in recent weeks, are part of the "Ghostwriter" campaign, the aim of which is to destabilize the political situation in the countries of Central Europe.
Last week, the Internal Security Agency sent to the special services of NATO member states information on the latest cyber attacks carried out against Poland.
Spokesperson of the Minister Coordinator of Special Services