Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid
A Russian state-sponsored hacking group known as ELECTRUM has been identified with medium confidence as the perpetrator of the "coordinated" cyberattack that targeted numerous locations around the Polish power infrastructure.
The late December 2025 activity was the first significant cyberattack targeting distributed energy resources (DERs), according to a new intelligence brief released on Tuesday by operational technology (OT) cybersecurity firm Dragos.
Systems controlling the dispatch of renewable energy systems from wind and solar sites, as well as communication and control systems at combined heat and power (CHP) plants, were impacted by the attack, according to Dragos. "Adversaries obtained access to operational technology systems essential to grid operations and disabled vital...