Protecting national infrastructure leaves no room for guesswork.
The fourth quarter of 2025 confirms that espionage, ransomware and hacktivist campaigns continue to challenge the European energy industry. Understanding these dynamics is essential if you want to plan ahead and make decisions with certainty.
This are the key takeaways:
State-sponsored espionage activity: Iran-linked operations continue targeting European energy organisations, focusing on persistence and intelligence gathering within critical infrastructure.
Ransomware pressure remains: Financially motivated attackers continue to target the industry opportunistically, with activity levels remaining stable compared to the previous quarter.
Hacktivist disruption: Pro-Russia hacktivist groups continue DDoS campaigns and attempts to sabotage exposed SCADA and OT systems across energy infrastructure.
