Russian ELECTRUM Tied to December 2025 Cyber Attack on Polish Power Grid

Hold up — Russian threat actors just hit Poland's power grid. Dragos confirms ELECTRUM was behind the December 2025 attack that disrupted ~30 distributed energy resource (DER) sites. No blackouts, but OT systems took damage. This is state-sponsored cyber warfare hitting critical infrastructure — and it's getting real.

ELECTRUM — linked to Russia's Sandworm APT — is no joke. They've been targeting energy grids since at least 2015. This Polish op shows they're still active, still dangerous, and still going after OT/ICS systems. Dragos tracked the intrusion to late 2025, with the attack hitting multiple DER facilities across Poland.

The attack didn't cause widespread power outages — but that's not the point. It's about proving they can infiltrate and damage critical infrastructure. OT systems got hit hard, showing these actors know exactly where to strike to cause maximum operational pain.

This isn't just another cyber incident — it's a warning shot. Russia's cyber units are actively targeting European energy infrastructure, and Poland's grid is in the crosshairs. Dragos's attribution confirms what we've feared: state-sponsored attacks on critical infrastructure are escalating.