Acronis

Cyber Incident Affects French Interior Ministry Email Services

First seen 27 Dec 2025, 05:00 UTC • Acronis

•23.1

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

French authorities confirmed a cyber incident impacting the email services of the Interior Ministry. The breach is under active investigation, with potential risks including account takeover, internal phishing, and data theft. Such email service compromises are known to facilitate targeting of partners and suppliers.

How this analysis works

Attack Flow

11 entities, 12 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Phishing
Ransomware

Organization (2)

HPE
Interior Ministry

Vulnerability (1)

CVE-2025-37164

Malware (1)

GhostPoster

Affected Platform (3)

Firefox
Microsoft 365
OneView

Threat Actor (1)

RansomHouse

Relationships

RansomHouse uses GhostPoster
RansomHouse uses Data Breach
RansomHouse uses Phishing
RansomHouse uses Ransomware
GhostPoster exploits CVE-2025-37164
CVE-2025-37164 targets Firefox
CVE-2025-37164 targets Microsoft 365
CVE-2025-37164 targets OneView
RansomHouse targets HPE
RansomHouse targets Interior Ministry
GhostPoster targets HPE
GhostPoster targets Interior Ministry

Continue Reading

RansomHouse Cyberattack Disrupts Nichirei Operations and Supply Chain Ransomware Attack Disrupts Major European Museums via Vivaticket Breach Askul Ransomware Attack Compromises 740,000 Customer Records Ransomware Fuels Surge in Global Cyberattacks Data Breaches Impact Millions Across Diverse Companies RansomHouse Ransomware Upgrades to Multi-Layered Encryption

Cyber Incident Affects French Interior Ministry Email Services

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading