Pro-Russian hackers intercept Romania-NATO/EU emails; SRI confirms

A malicious program on a Romanian government email server has been exfiltrating correspondence with NATO and EU addresses since 23 December 2025, as disclosed by ESET and confirmed by Romania's SRI. The attribution to pro-Russian actors is based on ESET's assessment; the full scope and data compromised remain unclear. This signals a sustained cyber-espionage campaign targeting Romania's Western institutional communications.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works