A pro-Russian hacker group has claimed responsibility for a cyberattack that has affected multiple Norwegian government digital services over the past three days. The ongoing attack, which began Monday, is described by the Norwegian Digitalization Agency (Digdir) as the largest it has ever experienced.
The denial-of-service attacks aimed to flood the agency with massive traffic, disrupting services including a system that allows citizens to use a single login for various public services. However, Digdir stated that services remained operational for "practically all the time."
In a Telegram post widely reported by Norwegian media, the group Server Killers claimed responsibility, declaring "cyber war" on Norway. The group stated the attack was in response to Norway's renewal of security cooperation with Ukraine on August 23. During a visit to Kyiv that day, Norwegian Prime Minister Jonas Gahr Støre announced that Norway would provide 85 billion Norwegian crowns (approximately $9.2 billion) to Ukraine for the upcoming year, marking the third consecutive year of such aid. The two countries also committed to enhanced cooperation on drone technology and other modern warfare methods.
Norwegian officials had not commented on the hackers' claims by the time of publication.
European nations are on high alert due to increased Russian sabotage and malicious cyber activities since Russia's full-scale invasion of Ukraine in February 2022. Authorities suggest these attacks are intended to erode support for Ukraine, sow fear and division within European societies, and strain investigative resources.
Previous incidents have raised similar concerns. In 2025, Norwegian authorities attributed suspected sabotage at a dam to Russian hackers, who gained access to a digital system controlling a valve and increased water flow. A video of the dam's control panel, marked with a pro-Russian cybercriminal group's identifier, was posted on Telegram. Last year, Danish authorities also blamed Russia for cyberattacks against infrastructure and websites, with groups identified as Z-Pentest and NoName057(16) linked to state actors.