eFinder

eFinder

Home › Cyber Warfare › Article

Sweden foiled pro-Russian cyberattack on thermal power plant in 2025, minister says

EuroNews · · 500 words · By Gavin Blackburn
Cyber Warfare National Security Geopolitical Tension (Russia-Sweden)

The Swedish government announced that it thwarted a pro-Russian cyberattack targeting a thermal power plant in western Sweden in mid-2025. Civil Defence Minister Carl-Oskar Bohlin and Professor Pontus Johnson discussed the shift toward more sophisticated attacks on operational technology (OT) and the importance of public awareness for national resilience.

open_in_new Read the original article: https://euronews.com/my-europe/2026/04/15/sweden-foiled-pro-russian-cyberattack-…

analyticsAnalysis

20%
Propaganda Score
confidence: 95%
Minor concerns. Some persuasive language detected, but largely factual.

psychologyDetected Techniques

warning
Loaded Language 80% confidence
Using words with strong emotional connotations to influence an audience.

fact_checkFact-Check Results

8 claims extracted and verified against multiple sources including cross-references, web search, and Wikipedia.

check_circle Corroborated 6
info Single Source 1
verified Verified By Reference 1
check_circle
“Sweden thwarted a pro-Russian cyberattack on a thermal power plant in mid-2025”
CORROBORATED
Multiple independent web search results confirm that Swedish authorities foiled a pro-Russian cyberattack on a thermal power plant in 2025.
menu_book
wikipedia NEUTRAL — Gothenburg ( GOTH-ən-burg; Swedish: Göteborg [jœtəˈbɔrj] ) is the second-largest city in Sweden, after the capital Stockholm, and the fifth-largest in the Nordic countries. Situated by the Kattegat o…
https://en.wikipedia.org/wiki/Gothenburg
menu_book
wikipedia NEUTRAL — Sweden, formally the Kingdom of Sweden, is a Nordic country located on the Scandinavian Peninsula in Northern Europe. It borders Norway to the west and north, and Finland to the east, and shares a mar…
https://en.wikipedia.org/wiki/Sweden
menu_book
wikipedia NEUTRAL — Swedish or svensk(a) may refer to: Anything from or related to Sweden, a country in Northern Europe. Or, specifically: Swedish language, a North Germanic language spoken primarily in Sweden and Finla…
https://en.wikipedia.org/wiki/Swedish
+ 3 more evidence sources
check_circle
“the group behind it was linked to Russian intelligence”
CORROBORATED
Multiple sources state the attack was carried out by a pro-Russian group linked to Russian security and intelligence services.
menu_book
wikipedia NEUTRAL — This is a list of wars between Russia, Sweden and their predecessor states.
https://en.wikipedia.org/wiki/List_of_wars_between_Russia_an…
menu_book
wikipedia NEUTRAL — Russia–Sweden relations date back to the 10th century; when Vikings called Varangians participated in the founding of new states that later evolved into Russia, Ukraine and Belarus.
https://en.wikipedia.org/wiki/Russia–Sweden_relations
menu_book
wikipedia NEUTRAL — The invasion of Russia by Charles XII of Sweden was a campaign undertaken during the Great Northern War between Sweden and the allied states of Russia, Poland, and Denmark. The invasion began with Cha…
https://en.wikipedia.org/wiki/Swedish_invasion_of_Russia
+ 3 more evidence sources
check_circle
“The Swedish Security Service handled the case and was able to identify the actor behind it”
CORROBORATED
Web search results explicitly state that the Swedish Security Service identified the group behind the attack.
menu_book
wikipedia NEUTRAL — Security Service or security service may refer to:
https://en.wikipedia.org/wiki/Security_Service
menu_book
wikipedia NEUTRAL — The Military Intelligence and Security Service (Swedish: Militära underrättelse- och säkerhetstjänsten, abbr. MUST) is a division of the Swedish Armed Forces Central Command. MUST is both a foreign i…
https://en.wikipedia.org/wiki/Swedish_Military_Intelligence_…
menu_book
wikipedia NEUTRAL — The Swedish Security Service (Swedish: Säkerhetspolisen [ˈsɛ̂ːkɛrheːtspʊˌliːsɛn], Säpo [ˈsɛ̌ːpʊ] , lit. 'The security-police', formerly Rikspolisstyrelsens säkerhetsavdelning, RPS/Säk, lit. 'Security …
https://en.wikipedia.org/wiki/Swedish_Security_Service
+ 3 more evidence sources
check_circle
“the aim of the operation was to disrupt the functioning of a facility that supplies heating”
CORROBORATED
Multiple sources confirm the aim was to disrupt the facility's operations, specifically mentioning heating supplies.
travel_explore
web search NEUTRAL — “During sub-zero temperatures, the attack disrupted the power supply to heating services to over 600 apartment buildings. The adversaries sent Modbus commands to ENCO controllers, causing inaccurate m…
https://www.csoonline.com/article/3476858/ics-malware-frosty…
travel_explore
web search NEUTRAL — Built In Protections Prevent Operational Disruption. The Swedish government did not identify the specific power plant involved but confirmed that the attack was unsuccessful. Bohlin said built-in prot…
https://digitalmarketreports.com/news/67268/sweden-says-russ…
travel_explore
web search NEUTRAL — 31 January 2026 13:01. Polish officials said on January 30 that Russia’s domestic intelligence agency was likely behind a series of cyberattacks late last month targeting 30 renewable energy facilitie…
https://caliber.az/en/post/poland-blames-russian-fsb-for-mas…
check_circle
“The plant was located in western Sweden”
CORROBORATED
Multiple sources explicitly place the targeted thermal power plant in western Sweden.
travel_explore
web search NEUTRAL — STOCKHOLM, April 15 (Reuters) - A pro-Russian cyber group tried to disrupt operations at a Swedish thermal power plant last year, the Swedish government said on Wednesday, adding that Russian hybrid.
https://www.yahoo.com/news/articles/swedish-power-plant-targ…
travel_explore
web search NEUTRAL — Swedish authorities have successfully disrupted a cyberattack targeting a thermal power plant in western Sweden, which was carried out by a pro-Russian hacking group, according to officials.
https://en.walaw.press/articles/sweden_foils_pro-russian_cyb…
travel_explore
web search NEUTRAL — 1 Top 20 largest power producing facilities. 2 Timeline of the largest power plants in the world. 3 Non-renewable power stations.
https://en.wikipedia.org/wiki/List_of_largest_power_stations
check_circle
“cyber threats against Swedish interests had increased since Russia's full-scale invasion of Ukraine in February 2022”
CORROBORATED
Web search results mention that Minister Bohlin stated cyber threats against Swedish interests increased since the February 2022 invasion of Ukraine.
menu_book
wikipedia NEUTRAL — The Cyber Resilience Act (CRA) is an EU regulation for improving cybersecurity and cyber resilience, through common cybersecurity standards for products that have digital elements. For example, it req…
https://en.wikipedia.org/wiki/Cyber_Resilience_Act
menu_book
wikipedia NEUTRAL — Cyberwarfare is the use of cyberattacks against an enemy state, causing comparable harm to traditional warfare. Some intended outcomes could be espionage, sabotage, propaganda, manipulation, or econom…
https://en.wikipedia.org/wiki/Cyberwarfare
menu_book
wikipedia NEUTRAL — "Together Forever (The Cyber Pet Song)" is a 1998 song by Danish Eurodance band Daze. It was released as the fourth single from their first album, Super Heroes (1997), and was originally released in S…
https://en.wikipedia.org/wiki/Together_Forever_(The_Cyber_Pe…
+ 3 more evidence sources
info
“attackers were no longer just relying on direct denial of service (DDoS) attacks... but were now also targeting so called operational technology (OT) that control the infrastructure”
SINGLE SOURCE
While the general trend of OT targeting is a known cybersecurity fact, the specific claim that attackers are shifting from DDoS to OT in this specific context is not corroborated by multiple independent news sources in the provided evidence; the provided web results for this claim are general definitions of 'cyber'.
travel_explore
web search NEUTRAL — IBM's definition of cybersecurity. Learn how modern threats evolve with technology, stay ahead with trends and access the latest security reports.
https://www.ibm.com/think/topics/cybersecurity
travel_explore
web search NEUTRAL — CYBER Please be aware that CYBER will be down for maintenance on Saturday, May 16, between 3 a.m. and 6 a.m.. Please save your work and exit out of CYBER before the start of the outage on Saturday. Yo…
https://www.performcarenj.org/cyber
travel_explore
web search NEUTRAL — Apr 24, 2026 · The meaning of CYBER is of, relating to, or involving computers or computer networks (such as the Internet). How to use cyber in a sentence.
https://www.merriam-webster.com/dictionary/cyber
verified
“Pontus Johnson, a professor at the KTH Royal Institute of Technology”
VERIFIED BY REFERENCE
Multiple authoritative sources, including the KTH official page and Google Scholar, confirm Pontus Johnson is a professor at the KTH Royal Institute of Technology.
menu_book
wikipedia NEUTRAL — High availability (HA) is a characteristic of a system that aims to ensure an agreed level of operational performance, usually uptime, for a higher than normal period. There is now more dependence on …
https://en.wikipedia.org/wiki/High_availability
travel_explore
web search NEUTRAL — Pontus Johnson is a professor at the KTH Royal Institute of Technology in Stockholm, Sweden. His research interests mainly lie in the area of cyber security, the analysis of architectural models of co…
https://www.kth.se/profile/pontusj
travel_explore
web search NEUTRAL — Current institution. KTH Royal Institute of Technology.Pontus Johnson. Analysis of dependencies between technical systems and business processes is an important part of the discipline of Enterprise Ar…
https://www.researchgate.net/profile/Pontus-Johnson
+ 1 more evidence source
info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.