A newly identified Russian hacking group, dubbed “Laundry Bear,” has been implicated in cyberattacks against the Dutch police and intelligence agencies, as reported by the Netherlands’ security and intelligence services on Tuesday. These attacks, which occurred last September, resulted in the theft of sensitive work-related information.
According to an investigation conducted by Dutch security agencies AIVD and MIVD, the assault on Dutch entities was part of a broader campaign targeting Western and NATO interests. MIVD director Peter Reesink noted that Laundry Bear’s capabilities allow them to infiltrate sensitive information across various government organizations and companies globally. He emphasized the group’s specific focus on countries within the European Union and NATO, highlighting the geopolitical implications of their activities.
Laundry Bear has reportedly set its sights on a range of targets, including armed forces, government institutions, and defense contractors, as well as IT and service providers in multiple nations. Moreover, the hackers have attempted to breach Dutch high-tech companies that manufacture systems not available in Russia due to ongoing Western sanctions.
The ongoing investigation revealed that Laundry Bear is likely a state-supported cyber threat actor from Russia, raising concerns about the motivations behind their operations. In response to this revelation, Dutch authorities have opted to disclose the technical methods employed by the hackers to infiltrate systems, aiming to bolster the defensive measures of affected organizations.
AIVD chief Erik Akerboom stated that by revealing these methods, the chances of Laundry Bear’s success could be reduced, thereby enhancing the protection of digital networks in the Netherlands. He asserted that such actions would contribute to increasing national resilience against future cyber threats.
