Romania’s Intelligence Service (SRI) has reported that the National Cyberint Centre detected and stopped a cyberattack on a state institution carried out late last year by the Russian hacking group APT TURLA.
As stated on the Romanian intelligence service’s website, specialists identified the incident in December 2025 and immediately took steps to counter it and mitigate the consequences.
The hackers exploited vulnerabilities in Microsoft operating systems, but the centre’s intervention halted the threat. The intelligence service found no evidence of a leak of confidential data, and the operation of the compromised email system was restored.
SRI staff informed relevant specialists about the situation and established co-operation with European partners, the intelligence community, as well as European Union and NATO structures. Cyberint is now conducting large-scale investigations that also cover other episodes of Russia’s cyber campaigns.