In the landscape of cybersecurity, attacks on critical infrastructure represent one of the most serious threats to national stability. At the end of 2025, Poland was the target of a sophisticated cyber attack aimed at its energy system, highlighting the growing vulnerability of modern electrical grids.
On December 29 and 30, 2025, a group of hackers orchestrated a coordinated attack against approximately 30 energy facilities distributed across Poland, including wind farms, solar plants, and cogeneration facilities. The attackers used a destructive malware called “DynoWiper,” specifically designed to compromise the communication and control systems between grid operators and distributed generation plants. In particular, Remote Terminal Units (RTUs) and network infrastructures managing these vital connections were targeted.
This incident is particularly significant because it demonstrates how energy infrastructures have become primary targets in cyber warfare between nations. Although the attack failed to cause operational disruptions and Polish transmission networks remained secure, it represents a clear signal of the evolution of attack tactics. It is important to note that the attack coincided with the tenth anniversary of the BlackEnergy attack against Ukraine in 2015, suggesting a possible symbolic motivation.
To protect against similar threats, companies managing critical infrastructure should implement rigorous cybersecurity protocols, conduct regular vulnerability assessments, and maintain isolated backup systems. It is also essential to invest in staff training to recognize and respond quickly to potential threats.
- Key points to remember:
- Attacks on energy infrastructure are increasing and require advanced defense systems
- Public-private collaboration is essential to share information on emerging threats
- Timeliness in incident response can make the difference between a failed attempt and a serious service disruption
Sources:
https://www.infosecurity-magazine.com/news/wiper-attack-polish-power-grid/
https://www.zetter-zeroday.com/cyberattack-targeting-polands-energy-grid-used-a-wiper/
https://www.theregister.com/2026/01/26/moscow_likely_behind_wiper_attack/
https://www.dragos.com/blog/poland-power-grid-attack-electrum-targets-distributed-energy-2025
https://thehackernews.com/2026/01/russian-electrum-tied-to-december-2025.html
https://therecord.media/poland-electrical-grid-cyberattack-30-facilities-affected
https://www.asisonline.org/security-management-magazine/latest-news/today-in-security/2026/january/Poland-Stops-Cyberattack-On-Energy-Grid/
Source: BleepingComputer