1. Skip to content
  2. Skip to main menu
  3. Skip to more DW sites
In focus
ChristmasSyriaGerman election 2025
Latest audioLatest videos
Live TV
PoliticsGermany

Germany warns Russia over cyberattacks ahead of election

September 6, 2021

Berlin has said it has "reliable information" that a series of attempts to get hold of lawmakers' personal details can be linked to the Russia-linked Ghostwriter hacker group.

https://p.dw.com/p/3zyv1
A symbolic photo of a man sitting in front of a computer
The Foreign Ministry said the attacks could be linked to a Russian hacking group called GhostwriterImage: picture-alliance/dpa/O. Berg

Germany blamed Russia on Monday for a recent wave of cyberattacks targeting German politicians.

"The federal government strongly urges the Russian government to stop these unacceptable cyber activities with immediate effect," Foreign Ministry spokeswoman Andrea Sasse said in Berlin.

Sasse added that a ministry official had made the same demand directly to a representative of the Russian Foreign Ministry last week.

What are the details of the cyberattacks on German politicians?

Sasse said that a hacker outfit called Ghostwriter had been "combining conventional cyberattacks with disinformation and influence operations" and that activities targeting Germany have been observed "for some time."

Most recently, several lawmakers from the governing coalition parties — the CDU/CSU and SPD — are said to have been affected by the hack.

Sasse said that ahead of Germany's federal election on September 26, there were attempts to obtain personal login details of federal and state lawmakers, with the aim of committing identity theft.

Russian cyberespionage comes to Germany

Why did Germany accuse Russia of being behind the attacks?

Security authorities had informed the German parliament at least three times this year about cyberattacks on parliamentarians by foreign intelligence service.

"These attacks could serve as preparations for influence operations such as disinformation campaigns connected with the parliamentary election,'' Sasse said.

"The German government has reliable information on the basis of which Ghostwriter activities can be attributed to cyber actors of the Russian state and, specifically, Russia's GRU military intelligence service."

It "views this unacceptable activity as a danger to the security of the Federal Republic of Germany and for the process of democratic decision making, and as a severe strain on bilateral relations.''

Sasse also said Germany urges the Russian government to end such activity immediately, and has made that demand directly to Russian officials.

Cyberattack still 'ongoing'

lc/rt (dpa, AP)