Hacktivist Surge in Eastern Europe Amid Geopolitical Tensions

Executive Summary

Between February 28 and March 2, 2026, a coordinated surge of 149 hacktivist-driven Distributed Denial-of-Service (DDoS) attacks targeted 110 organizations across 16 countries, including several in Eastern Europe. This activity aligns with heightened geopolitical tensions and reflects a growing trend of cyber operations conducted by non-state actors in the region.

Incident Overview

The majority of these attacks were concentrated in the Middle East, particularly Kuwait, Israel, and Jordan, accounting for over 76% of incidents. However, Eastern European nations were not exempt from this wave of cyber aggression. Notably, Latvia's State Security Service reported an increase in cyber threats, including DDoS attacks and malware distribution, with Russia identified as the primary source. (therecord.media)

Attribution and Actor Analysis

The hacktivist groups responsible for these attacks include Keymous+ and DieNet, which collectively accounted for nearly 70% of the activity during the monitored period. Keymous+ is a Tunisian-based group known for supporting pro-Palestinian causes, employing DDoS assaults combined with data-leak operations. DieNet, another prominent actor, has been linked to large-scale DDoS campaigns targeting government portals, telecom providers, airports, and financial institutions across the Middle East and Europe. (thehackernews.com)

Impact on Eastern European Targets

While the majority of attacks were concentrated in the Middle East, Eastern European countries, including Latvia, have reported increased cyber threats. Latvia's national security service highlighted a record number of cyber incidents in 2025, with Russia identified as the primary source. (therecord.media) These incidents underscore the vulnerability of critical infrastructure and government entities in the region to cyberattacks.

Conclusion

The recent surge in hacktivist cyberattacks, particularly those attributed to groups like Keymous+ and DieNet, highlights the evolving threat landscape in Eastern Europe. The region's critical infrastructure and governmental institutions remain prime targets for cyber operations conducted by non-state actors, often with geopolitical motivations. Ongoing vigilance and enhanced cybersecurity measures are imperative to mitigate the risks associated with these evolving threats.

Highlights:

• Serbia emerges as main hub for Russian destabilization operations in Europe, Published on Monday, March 16