A cyberattack targeted Luxembourg State services on Tuesday, 23 June, in the midst of National Day celebrations.
The cyber risk assessment unit confirmed on Friday afternoon that state workstations had been hit by a spear-phishing attempt – a targeted form of attack distinct from generic mass emails, designed for greater effectiveness. According to a press release issued by the unit, the incident affected "the government's information system."
The exact time at which the phishing attempt was detected was not specified in the release. However, authorities implemented preventive measures as soon as the threat was identified. At this stage, no major impact on users has been reported, and the responsible services are continuing their investigations and analyses.
The cyber risk assessment unit stated that additional precautionary measures would be taken if necessary. The unit brings together a range of entities, including the High Commission for National Protection, the Financial Sector Supervisory Commission (CSSF), the police, the intelligence service, and several ministries.
