Russia forces Poland allot $1B Cybersecurity budget and Microsoft on RaccoonO365 Phishing Attack

News

Poland Allocates $1 Billion Cybersecurity Budget in Response to Rising Russian Cyberattacks

Poland has made a bold move to protect its critical infrastructure by allocating a substantial $1 billion (or €80 million) cybersecurity budget. This decision comes as the nation grapples with an increasing wave of cyberattacks, predominantly attributed to Russia, aimed at destabilizing its key sectors. The attacks, which have been targeting critical utilities like power grids and water systems, along with vital sectors such as healthcare, have prompted the Polish government to act swiftly and decisively.

The country has become a prime target of Russian cyber activity, particularly as tensions between the two nations continue to escalate. According to Polish authorities, Moscow is launching an estimated 50 to 60 digital attacks per month, with hospitals and other healthcare facilities becoming frequent targets. The hackers are reportedly attempting to steal sensitive data, potentially compromising national security and public health.

In response, the Polish government is ramping up its cybersecurity efforts to safeguard over 2,400 local administrations and national infrastructure. By mid-2026, Poland aims to significantly strengthen its cyber defenses, ensuring robust protection against these relentless threats. The scale of the cyber warfare has been alarming, with the government acknowledging that 99% of these attacks are linked to Russian state-sponsored hackers.

This announcement came shortly after a warning from Poland’s Prime Minister, Donald Tusk, who cautioned that Moscow might be combining cyberattacks with political provocations aimed at destabilizing the country. He emphasized that these tactics are part of a broader strategy to undermine Poland’s security and sovereignty within the European Union.

Microsoft Disrupts RaccoonO365 Phishing Campaign Targeting Microsoft Users

In a related cybersecurity development, Microsoft has successfully disrupted the operations of a major phishing campaign known as RaccoonO365 (also referred to as Storm 2246). This sophisticated tool was used by cybercriminals to steal login credentials from users of Microsoft Office 365 services, a widespread platform used by businesses, governments, and individuals alike.

Microsoft’s Digital Crimes Unit (DCU) launched an operation that targeted the infrastructure behind the RaccoonO365 tool, significantly weakening its ability to carry out phishing attacks. As part of the takedown, Microsoft also seized control of 338 websites that had been used to host phishing pages designed to deceive Office 365 users into revealing their usernames and passwords.

The RaccoonO365 campaign, which began in July 2024, had already affected over 5,000 Microsoft accounts across 94 countries. Most of the targeted accounts were linked to the healthcare industry, as well as those connected to tax-related phishing schemes. These types of phishing attacks are particularly concerning as they involve sensitive data that could be exploited for malicious purposes, ranging from identity theft to corporate espionage.

Microsoft’s response highlights the company’s ongoing commitment to enhancing security and privacy for its users. As a global tech giant, Microsoft has continually worked to fortify its platforms against evolving cyber threats. The company’s proactive approach is part of a broader effort to combat cybercrime and protect individuals and organizations worldwide from increasingly sophisticated cybercriminal tactics.

Join our LinkedIn group Information Security Community!

Naveen Goud
Naveen Goud is a writer at Cybersecurity Insiders covering topics such as Mergers & Acquisitions, Startups, Cyber Attacks, Cloud Security and Mobile Security

No posts to display