Russian-Linked Hackers Disguised as Journalists Launch Foiled Cyber Espionage Campaign Against UK Ministry of Defence

29.05.2025, 15:49 uatv.ua

A cyber espionage operation conducted by Russian-affiliated hackers posing as journalists has targeted personnel at the United Kingdom’s Ministry of Defence (MoD), but the attack was detected and successfully thwarted, according to reports by Sky News.

Details about the foiled hacking attempt emerged following a statement from UK Defence Secretary John Healey, who announced that British armed forces are enhancing their offensive cyber capabilities against hostile states such as Russia as part of a highly anticipated defence review.

The revelation of the thwarted cyberattack coincides with UK Defence Secretary John Healey’s announcement that British military forces are significantly bolstering their offensive cyber capabilities. This enhancement is part of the forthcoming Strategic Defence Review, which aims to strengthen the UK’s resilience and proactive cyber posture against hostile nations such as Russia.

Originally unveiled by Prime Minister Keir Starmer in July 2024, the Strategic Defence Review is scheduled for official publication this coming Monday, strategically timed ahead of the NATO summit in June.

According to an in-depth analysis by the UK’s National Cyber Security Centre (NCSC), the initial phishing campaign involved two emails themed around journalism, impersonating legitimate news organizations. A subsequent wave employed a financial pretext and targeted a commercial file-sharing platform used by MoD staff.

Further cyber forensic investigation traced the malware to the notorious Russian hacking group known as RomCom, underlining ongoing cyber threats emanating from Moscow.

In a broader context, NATO has proposed incorporating cybersecurity and related border and coastal protection expenditures into a new “non-military” spending target of 1.5% of member states’ GDP, reflecting the alliance’s recognition of cyber threats as a core element of contemporary security.