Cyber Incident Victim: Republic of Latvia
Date:
Jul 2022
Location:
Latvia
Summary
A pro-Kremlin hacker group known as Killnet conducted the most severe cyberattack in Latvia's history, targeting the nation due to its assertive measures such as reinstating conscription and planning the removal of Soviet monuments. The coordinated digital assault included a sustained 12-hour attack on the public broadcasting center, part of a broader campaign against ten Western countries supporting Ukraine. Killnet, which has previously claimed cyberattacks against multiple European nations including Italy and Lithuania, employs disruptive cyber tactics aligned with Russian interests. The incident underscored escalating cyber hostilities against states opposing Russia's geopolitical agenda.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On July 8, 2022, Latvia experienced its largest recorded cyberattack, orchestrated by the pro-Kremlin hacker group Killnet. The attack included a sustained 12-hour assault targeting Latvia’s public broadcasting infrastructure, significantly disrupting operations. Killnet, a network of cyberactivists aligned with Russia, publicly declared "war" on ten Western nations supporting Ukraine, explicitly naming Latvia alongside the United States and Britain. This coordinated offensive formed part of a broader campaign against countries perceived as hostile to Russian interests, with prior attacks attributed to Killnet in Italy, Lithuania, and Norway. The group’s operational focus centered on overwhelming target systems through high-volume traffic attacks, though specific technical details of the Latvian incident remain unspecified in public reporting. A senior NATO official confirmed the unprecedented scale of the attack, characterizing it as the most intense cyber onslaught in Latvia’s history. The timing coincided with heightened regional tensions following Russia’s invasion of Ukraine and Latvia’s subsequent policy shifts.
The attack occurred amid Latvia’s implementation of assertive national security measures, including the reinstatement of military conscription and legislative efforts to dismantle Soviet-era monuments. These actions likely contributed to Latvia’s designation as a priority target by pro-Russian threat actors. While the full technical scope of affected systems was not detailed, the confirmed disruption to public broadcasting services indicated an intent to compromise critical information dissemination channels. No collateral damage to other sectors or specific financial losses were disclosed in available reporting. The NATO official’s public acknowledgment of the attack underscored its geopolitical significance within the alliance’s security framework. Killnet’s explicit targeting of nations supporting Ukraine demonstrated a continued pattern of hybrid warfare tactics extending beyond conventional battlefields. The incident highlighted Latvia’s vulnerability to coordinated cyber campaigns amid escalating tensions with Russia.