러시아, 대NATO 회원국 사이버 공격 (2024.05.06 월요일) > 공지사항

1. 러시아 정보부(GRU)의 지시를 받는 해커 조직(APT28)이 NATO 국가 수개국을 대상으로 사이버 공격을 감행 중.

- 독일, 체코, 폴란드, 슬로바키아, 리투아니아, 스웨덴에 사이버 공격 집중.

- 에스토니아, 라트비아, 영국도 공격받고 있음.

- 국가별 공격대상은 정부기관, 공공기관, 정당 등 임.

- 우크라이나 지원에 앞장서고 있는 국가들이 공격대상에 포함되었음.

- EU는 올해 세계 60개국에서 열리는 선거에 러시아의 개입시도의 일환으로 해석하고 있음

- 독일 의회에 대한 사이버 공격(2015년)을 주도한 APT28은 EU로부터 2020년부터 제재를 받고 있음. (이상 링크 기사 참조)

2. 스웨덴 정부에서는 러시아 사이버 공격사례(2017.12~2018.5)를 발견했음에도 법적 조처할 방법이 없어서 수사를 종결한 바 있음 (2021년).

스웨덴 정부에서 발표한 수사결과를 아래와 같이 인용 함. 참고로 ‘약물 복용 방지(Anti-doping)’ 정보 입수 목적으로 대 스웨덴 체육협회 사이버 공격 한 사례 임.

(스웨덴 검찰의 2021년 발표 전문)

Investigation into serious breach of data secrecy by Russian intelligence agency discontinued
Published: 4/13/2021

During the period December 2017 to May 2018, the Swedish Sports Confederation was the target of repeated
and comprehensive breaches of their computer system in Sweden.

The offence is classified as serious breach of data secrecy.

Today, the prosecutor has decided to discontinue the investigation due to the lack of the necessary preconditions
for taking legal proceedings abroad or extradition to Sweden.

Under the direction of a prosecutor from the National Security Unit, the Swedish Security Service has investigated
who or what has carried out the data breaches and for what purpose. The investigation has cooperated with several
other nation’s security services.

”The investigation shows that the Russian military intelligence, GRU who, via its 85th Center, also known as unit 26165,
has planned and carried out the serious breaches of data secrecy against the Swedish Sports Confederation.

We can further state that the breaches have been a part of a Russian campaign directed against national and
international anti-doping organisations such as WADA and USADA. The campaign has also been directed against FIFA,”
says public prosecutor Mats Ljungqvist.

The data breaches have resulted in GRU accessing Swedish athletes’ personal details, such as medical records.

”The information has been published openly and, based on these details, Swedish media have written articles
which follow GRU’s narrative of discrediting athletes and sports organisations in the West,” says Mats Ljungqvist.

“Against the background of parties acting for a foreign power, in this case Russia, we have reached the conclusion
that the necessary preconditions for taking legal proceedings abroad or extradition to Sweden are lacking.
I have, therefore, today decided to discontinue the investigation,” concludes Mats Ljungqvist. (인용 끝)