Pro-Russian Hackers Targeted Swedish Power Plant in 2025 Cyberattack In spring 2025, a suspected pro-Russian hacker group attempted to disrupt operations at a thermal power plant in western Sweden, according to Swedish Minister for Civil Defense Carl-Oskar Bohlin. The attack, which targeted the plant’s operational technology (OT) systems industrial software controlling critical infrastructure was thwarted by the facility’s built-in security measures. Sweden’s security service linked the perpetrators to Russian intelligence services, aligning with a broader pattern of cyber threats against Europe’s energy sector. Similar incidents have been reported in Norway, Denmark, and Poland, where a Russia-affiliated group, Sandworm, deployed data-wiping malware in an attack on the power grid last year, risking widespread blackouts. Bohlin noted a tactical shift among pro-Russian hackers, who have moved from denial-of-service attacks to more destructive cyber operations. The incident underscores growing concerns over Russian cyber activity targeting critical infrastructure in nations supporting Ukraine. U.S. authorities have also warned of Russian-backed groups, including CyberArmyofRussia_Reborn and NoName057(16), targeting energy, water, and food production sectors across the West. While Ukraine has faced persistent cyberattacks on its energy infrastructure, recent intrusions appear focused on intelligence gathering to support missile strikes rather than immediate disruptions. The Swedish case highlights the escalating threat to industrial control systems, where successful breaches could have severe societal consequences.