The Russian cyber espionage group Fancy Bear is behind a cyber-attack on the internal network of the Spanish Ministry of Defense, which was reported in late March.
According to the newspaper El Español, the Spanish authorities believe that Russia and hackers associated with it are the "foreign power" behind the attack.
The investigators reached this conclusion by analyzing the cybercriminals’ methods and finding in them the “Russian trace”. In particular, similar attacks were carried out against the the servers of the United States Democratic Party in 2016.
The virus was introduced through an external email in order to gain access to the "technological secrets of the military industry of Spain".