Finnish Intelligence Warns of Russian Cyber Threats Targeting Email Systems

The Finnish Security and Intelligence Service (Supo) has recently intensified its warnings regarding cyber espionage activities directed at Finland by Russia and other authoritarian regimes. On Friday, Supo, in collaboration with the Finnish Defence Intelligence Agency and the US National Security Agency (NSA), released an advisory concerning a Russian state-sponsored cyber threat actor known as Laundry Bear. This group is specifically targeting organizational email systems, raising concerns among various sectors.

Earlier this month, Supo alerted Finnish businesses to a Russian cyber-espionage campaign that exploits vulnerabilities in network devices. The latest advisory emphasizes the need for vigilance among companies and organizations, particularly those in public administration, critical infrastructure, and the defense sector, which are deemed at high risk.

Laundry Bear has been linked to a broad spectrum of victims, including military industry operators, state administration bodies, technology firms, and third sector organizations. The group has primarily focused its efforts on NATO countries, including Finland, as well as Ukraine. Supo detailed that Laundry Bear often employs straightforward yet effective tactics, such as social manipulation and the use of stolen user credentials, to infiltrate the email systems of targeted organizations.

The shift towards cyber espionage by Russian intelligence has been attributed to the expulsion of numerous Russian intelligence officers from Western countries following Moscow's invasion of Ukraine nearly four and a half years ago. This has compelled Russia to increasingly rely on cyber methods for its espionage activities, according to Supo. As the threat landscape evolves, Finnish authorities continue to monitor and respond to these cyber threats to safeguard national security.