eine russische Cybergruppe
Attribution profile
- Type
- Activist
- Location
- Russia
- Known incidents
- 4 incidents
- Sources
- 0 sources
- First seen
- 2023-04-04
- Last seen
- 2023-04-04
- Updated
- 2026-10-03 02:06
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor is known as eine russische Cybergruppe, a Russian‑based cyber group. It has claimed responsibility for distributed denial‑of‑service attacks against German government online services, including Berlin’s government service portal and the ministerial websites, police homepage and service portal of Mecklenburg‑Vorpommern, as well as related disruptions in Brandenburg, Schleswig‑Holstein, Saarland, Mecklenburg‑Vorpommern, Saxony‑Anhalt and Lower Saxony. The observed activity aims to disrupt public‑facing services through volumetric traffic floods, with no reported data theft or network intrusion. The group’s tactics, as described in the sources, consist of generating mass HTTP requests to overload servers; no specific malware, initial‑access vectors or tooling are mentioned. Attribution rests on the group’s own social‑media claims of responsibility; no public evidence links it to a state sponsor or criminal consortium. The April 4 2023 DDoS campaign against multiple German state portals represents its most notable publicly reported operation.
Incidents
Attributed incidents are available to members.
4 incidentsSources
Sources available to members: 0 sources.