Powermag Europe's Electricity Infrastructure Under Siege from Hybrid Warfare
Article Content
- •Eurelectric reports most European utilities are unprepared for hybrid warfare threats.
- •Over 1,065 attacks on Ukrainian energy infrastructure recorded since the war began.
- •Significant incidents include a November 2025 strike involving 450 drones and 45 missiles.
European electricity infrastructure is increasingly targeted by hybrid warfare, with a report from Eurelectric revealing that most utilities are unprepared. The report highlights a surge in physical sabotage, cyberattacks, and aerial intrusions, particularly against energy assets in the EU. Since the onset of the war in Ukraine, over 1,065 attacks on Ukrainian energy infrastructure have been recorded, with damage estimates exceeding $20 billion. In 2025 alone, Ukraine experienced 1,225 attacks, including a significant strike on November 8 that involved 450 drones and 45 missiles. The Baltic Sea has also seen direct hits on subsea cables, with incidents involving vessels like the Yi Peng 3 and the Eagle S severing critical communications and power links. As tensions rise, European defense planners warn of potential future aggression, emphasizing the urgent need for enhanced resilience and preparedness in the energy sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Sandworm and Zyxel in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
UAC-0099 Enhances MATCHBOIL Malware Targeting Ukrainian Industries ESET Research has documented the evolution of MATCHBOIL, a C# downloader used by the Russia-aligned group UAC-0099, which has targeted Ukrainian transportation, manufacturing, and energy sectors. The malware, first noted by CERT-UA in August 2025, has been under development since at least April 2024. MATCHBOIL is…
UAC-0099 Targets Ukrainian Government with ASHVEIN Malware The Russia-aligned threat actor UAC-0099 has been linked to a new .NET infostealer and RAT named ASHVEIN, targeting Ukrainian government personnel. This malware, also referred to as 'TelemetryBrowser,' features capabilities such as credential theft from Chrome and Firefox, screenshot capture, and remote shell…