CSIDB logo
Incident

Momentum

Incident posture

Attack window
Mar 2022
Location
Hungary
Status
Historical
CIA posture
Available to members
Updated
2025-12-16 00:00

Linked entities

Victim
Momentum
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Mar 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyberattack targeted the website of a liberal opposition party, Momentum, causing temporary inaccessibility through a distributed denial-of-service (DDoS) overload. The incident occurred alongside similar attacks against government-critical news portals Telex and 444, which experienced twentyfold traffic surges and homepage disruptions, as well as prior assaults on pro-government party and media websites. While existing protective systems prevented material damage to the opposition party's infrastructure, the outage impaired its ability to communicate with voters during an election campaign period. Police investigations into all related attacks remained ongoing at the time of reporting.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On March 31, 2022, multiple Hungarian websites experienced coordinated cyberattacks. The liberal opposition party Momentum's website was targeted in the morning with an overload attack that rendered it inaccessible. Momentum confirmed its existing protection systems prevented material damage but emphasized the operational disruption impaired voter communication during the election campaign period. Concurrently that afternoon, two independent news portals critical of the government, Telex and 444, sustained distributed denial-of-service (DDoS) attacks. Telex's servers faced traffic volumes twenty times above normal levels, while attackers simultaneously attempted to overload its homepage. 444 experienced similar disruptions, causing temporary website unavailability. IT staff at Telex resolved the technical issues post-incident.

A defacement message appeared simultaneously on all affected platforms, stating: "This website is part of the state propaganda media! We have brought you the truth!..." The attacks occurred one week after government-aligned entities—including the ruling Fidesz party's website and pro-government media outlets—had themselves been hacked. Momentum characterized the timing as strategically significant given Hungary's impending elections. Police investigations into all attacks remained ongoing at the time of reporting. No group claimed responsibility, and forensic details about attack vectors beyond the DDoS/overload techniques were unspecified in available sources.

Sources

Sources available to members: 1 source.

CSIDB