Cyber Incident Victim: Ministry of Justice
Date:
Jan 2024
Location:
Finland
Summary
The Finnish Ministry of Justice's website experienced a denial-of-service attack, causing slow performance and intermittent outages. The Russian-affiliated hacker group NoName057(16) claimed responsibility for the disruption via Telegram, mirroring previous cyber attacks against Finnish parliamentary, governmental, and financial institutions. These incidents align with increased Russian cyber operations targeting Finland, attributed by national security agencies to reduced effectiveness of traditional intelligence methods. Similar disruptions previously affected critical national services including banking platforms and social security systems.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 9, 2024, the Finnish Ministry of Justice reported disruptions to its online service at http://oikeus.fi following a denial-of-service attack that began on Tuesday evening. The ministry confirmed the attack via a social media post on platform X, stating the website was operating more slowly than usual and experiencing intermittent outages. No further technical details about the attack vector, traffic volume, or duration were disclosed by the ministry. The incident marked another instance in a pattern of cyber attacks targeting Finnish governmental digital infrastructure, occurring during evening hours when technical response capabilities might be reduced. Service degradation impacted public access to justice-related online resources, though the ministry did not specify whether any data breaches or system compromises occurred beyond the availability issues.
Historical context indicates Finnish institutions including parliament, ministries, social security provider Kela, and financial entities have faced repeated cyber assaults over recent years. Finnish authorities Traficom and Supo attribute increased Russian cyber aggression to Moscow's reduced human intelligence capabilities, forcing greater reliance on digital operations. A notable precedent occurred in August 2022 when the Finnish parliament's website became inaccessible following an attack claimed by Russian hacker group NoName057(16) via Telegram. While the January 2024 Ministry of Justice incident shared characteristics with these distributed denial-of-service patterns, no threat actor claimed responsibility in the immediate aftermath. The ministry's public communication strategy focused on acknowledging service degradation without elaborating on defensive measures, forensic findings, or projected restoration timelines.