Pro-Russian cyber collectives expand attacks across Europe and target Italian officials
Pro-Russian cyber collectives have expanded operations across Europe, targeting key infrastructure and leaking sensitive data of Italian officials.
Pro-Russian cyber collectives, including Noname057(16), Everest, Male State, and Z-Pentest, have expanded targeted operations across Europe against key infrastructure, transport networks, and public institutions. Recent targets include systems tied to the Brenner Base Tunnel project, travel provider Smartbox, French blood banks, and supermarket refrigeration networks across nine European nations.
Concurrently, sensitive personal data belonging to Italian Foreign Minister Antonio Tajani, Rome Chief Prosecutor Francesco Lo Voi, and cyberpolice chief Ivano Gabrielli was published on the dark web, with bounties offered for additional information.
While European intelligence agencies broadly attribute the multi-front campaign of extortion, data breaches, and fake bomb threats to pro-Russian hackers, Italian intelligence sources indicated there is no single directing authority and raised possibilities of misdirection tactics.
Sources: Corriere della Sera, Der Standard, Il Messaggero, Il Sole 24 Ore, La Repubblica.
How outlets assessed this
- Il Messaggero Skeptical Reported that Italian intelligence doubts a single Russian command structure behind the attacks, raising possibilities of misdirection.
- Nov 9, 2026, 02:00 AM UTC
- Il Messaggero Skeptical Emphasizes Italian intelligence doubts over sole Russian responsibility, noting potential misdirection and the absence of a single directing entity.
- Il Messaggero Skeptical Noted Italian intelligence skepticism regarding a unified command, raising the possibility of misdirection tactics alongside the Russian track.
- Il Sole 24 Ore Cautious Focused primarily on the strategic economic threat posed by data theft targeting critical transport infrastructure like the Brenner Tunnel.
- Il Messaggero Skeptical Framed attribution cautiously, highlighting Italian intelligence doubts about a single directing authority and potential misdirection.
- La Repubblica Alarmed Emphasized the broad scale of the pro-Russian cyber campaign targeting critical European transit and commercial infrastructure.
- Il Messaggero Skeptical Highlights Italian intelligence doubts regarding a unified command structure and notes suspicions of potential Ukrainian misdirection.
- Il Sole 24 Ore Cautious Focuses on strategic infrastructure threats, detailing ransomware group Everest's targeting of the Brenner Base Tunnel.
- Corriere della Sera Alarmed Focused on Defence Minister Crosetto's grave warnings that the state is unequipped for hybrid warfare and faces a battle for survival.
- La Repubblica Cautious Emphasized Foreign Minister Tajani's assurances regarding Italy's defensive capabilities while noting upcoming G7 discussions and potential election interference risks.
Sources
- La Repubblica — Il Brennero e Smartbox nel mirino dei filorussi "Rubati dati sensibili”
- Der Standard — Hacker veröffentlichen vertrauliche Daten des italienischen Außenministers
- Il Messaggero — Attacchi hacker, chi c'è dietro? Accuse alla Russia, gli 007 italiani: «Non c?è una sola regia». Il sospetto del depistaggio ucraino
- Corriere della Sera — Attacchi hacker in Europa, chi sono i «Noname» e gli altri gruppi. «Non avete ancora capito come difendervi da noi» |
- Il Sole 24 Ore — La pista dei filorussi di Everest per l’attacco hacker al Brennero
Earlier coverage
- Nov 9, 2026, 01:00 PM UTCItalian officials urge G7 action and stronger defenses following cyberattacks
- Nov 9, 2026, 12:30 PM UTCEuropean infrastructure and Italian officials targeted in cyberattack campaign
- Nov 9, 2026, 08:00 AM UTCEuropean infrastructure and officials targeted in wave of cyberattacks
- Nov 9, 2026, 03:30 AM UTCPro-Russian cyber collectives target key European infrastructure and Italian officials
- Nov 9, 2026, 12:00 AM UTCEuropean cyberattacks expand to infrastructure as Italian officials' data leaked online
- Nov 8, 2026, 11:30 PM UTCItalian officials warn of escalating hybrid cyber warfare after foreign minister targeted
- Nov 8, 2026, 11:00 PM UTCItalian foreign minister denounces dark web leak as hybrid warfare
- Nov 8, 2026, 10:30 PM UTCItalian foreign minister faces cyber threats amid European breach wave
- Nov 8, 2026, 10:00 PM UTCItalian foreign minister denounces dark web leak as cyberattacks escalate
- Nov 8, 2026, 09:30 PM UTCItalian foreign minister Antonio Tajani targeted in cyberattack alongside key infrastructure