German authorities have issued an arrest warrant for Russian hacker Nikolai Kozachek (aka “blabla1234565” and “kazak”), accused of conducting a cyber attack on a NATO analytical center. According to German officials, in April 2017, Kozacek hacked the IT systems of the NATO analytical center in North Rhine-Westphalia, and installed the X-Agent keylogger on the organization’s computers. According to investigators, the hacker hacked into at least two systems and gained access to NATO’s internal information.
Investigators have linked a 32-year-old Russian citizen to APT28 (or Fancy Bear). APT 28 was previously linked to an attack on the IT system of the German Bundestag in the spring of 2015.
As part of the investigation, it turned out that the target of the attack was not only the NATO center, but also about 1,000 other objects. Another Russian, Dmitry Baden, is also involved in the investigation, according to the Prosecutor General’s Office, who was involved in a cyber attack on the Bundestag in 2015.