Norwegian intelligence says cyber attacks on Ukraine routed through Norway

E-service officials reported that the TI surveillance platform has identified multiple cyber operations conducted by a state actor that exploited Norway’s digital infrastructure to reach Ukrainian government targets. Lars Nordrum explained that the intrusion into a Norwegian critical-infrastructure firm gave the attacker full administrative access for an extended period without the company’s knowledge. While the responsible foreign state was not named, the agency highlighted the difficulty of detecting espionage-focused attacks compared with more obvious disruptions like DDoS.

A specialized committee, led by BI professor Marius Emberland, evaluated the new intelligence law and urged more public insight into the number of cases reviewed by courts. The report also noted TI’s contribution to preventing a major terror plot, though details of the plot remain classified. Ongoing concerns about the secrecy surrounding metadata collection and the distinction between metadata and content data were raised, with recommendations for legislative clarification.