Cyber attacks on railways in Germany. The trail leads to Russia


“Due to the nature and tools used, similar attacks have been repeatedly associated with hacker groups controlled by Russian special services, including APT28 and NoName057(16). Their activity is part of Russia's hybrid strategy aimed at destabilizing European Union countries,” CPD said on social media.
Who could have been behind the cyber attack on Deutsche Bahn?
What tools were used during the attack?
What caused the DDoS attack on Deutsche Bahn's systems?
What are the effects of disruptions on rail transport?
The German carrier reported that a DDoS overload attack that began on Tuesday afternoon caused disruptions in Deutsche Bahn's information and reservation systems. Disruptions continued Wednesday morning.
The problems affected the DB Navigator application and the bahn.de website, through which passengers can check timetables and buy tickets.
“Continuation of the Kremlin's hybrid actions”
“The aim of such operations is to undermine citizens' trust in state institutions and create a sense of chaos and vulnerability to threats. It is also important that disruptions in railway operations affect not only passenger transport, but also military and commercial logistics,” said the CPD, which operates under the National Security and Defense Council of Ukraine.
“The cyber attack on Deutsche Bahn is a continuation of the Kremlin's hybrid actions against Europe. This systemic policy of Russia requires a coordinated response from the EU – new sanctions against Russia and strengthened cyber protection,” the Center emphasized.




