Russia is responsible for destructive and disruptive cyber attacks against Denmark

FE assesses that the pro-Russian group Z-Pentest, which was behind a destructive cyberattack against a Danish waterworks in 2024, has connections to the Russian state. Likewise, FE assesses that the group NoName057(16), which carried out denial-of-service attacks against Danish websites in the run-up to the Danish municipal and regional council elections in 2025, has links to the Russian state.

The Russian state is using both groups as part of the country's hybrid attacks against the West. The purpose is to create insecurity in the countries that the groups attack, as well as punish the countries for supporting Ukraine.

Russia's cyberattacks are part of the country's broad and overall influence efforts aimed at undermining Western support for Ukraine. FE assesses that the election was used as a platform to gain public attention, just as it has been the case in several other European elections.