RESEARCH PREVIEW — Attention: Data Spaces may hack the planet.
Data Spaces

Norway

Analyse
Primarily a target — 5 received· 0 initiated· 3 responses ·NATO

In the last 60 days, 5 new cyber operations involving Norway were added to the database: no change compared to the previous period. The number of operations is currently 29% above the long-term 60-day average. The Intensity of cyber operations involving Norway over the last 60 days is declining to 1.0, compared with 2.0 in the preceding 60-day period. This is below the all-time average for Norway of 2.7.

Maintained by EuRepoC research analysts · updated 16 Oct 2026
5received initiated0
For last 60 days, this country appears chiefly as a target — 5 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02

Cyber activity

5 incidents · as target
As target 5 As actor 0

Incidents directed at Norway targets, and the responses they drew.

Cyber incident intensity
Mean2.2/15Moderate
Range 1.0–4.0

Drag the ends of the observed range to narrow intensities.

4 coded incidents · Last 60 days
Database additions by weekincidents against Norway
Bar height shows incidents added during last 60 days; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
SectorIncidentsIntensityResponded
Civil service / administration 3 1.3Moderate 1/3 Government / ministries 2 1.5Moderate 0/2 Defence industry 1 0.0Moderate 0/1 Energy 1 0.0Moderate 0/1 Telecommunications 1 0.0Moderate 0/1 End user(s) / specially protected groups 1 4.0Moderate 0/1 Legislative 1 1.0Moderate 0/1 Digital Provider 1 1.0Moderate 1/1
Civil service / administration is the most-targeted sector — 3 of 5 incidents, 1 answered.
By originwho is behind activity against it
Iran, Islamic Republic of 2incidents avg 1.5 · Moderate Korea, Democratic People's Republic of 1incident avg 4.0 · Moderate Russia 1incident avg 1.0 · Moderate
02 / 02

Incidents received & responses

AUUSJPDE4 statesjoint WaterPlum Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026 Official policy 18 Sep 2026
Official policy 18 Sep 2026
AUUSJPDE4 states WaterPlum
Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026
Server Killers Norway ·Legislative Pro-Russian Group Called Server Killers Conducted DDoS Attack on Website of Norway's Parliament on 14 September 2026 14 Sep 2026
Incident · Low severity 14 Sep 2026
Server Killers Norway ·Legislative
Pro-Russian Group Called Server Killers Conducted DDoS Attack on Website of Norway's Parliament on 14 September 2026
NONorwegian Digitalisation Agency Norway Norwegian Digitaliseringsdirektoratet Director Frode Danielsen Issues Statement Following DDoS Attack on Digdir's Digital Solutions on 25 August 2026 Operational action 25 Aug 2026
Operational action 25 Aug 2026
NONorwegian Digitalisation Agency Norway
Norwegian Digitaliseringsdirektoratet Director Frode Danielsen Issues Statement Following DDoS Attack on Digdir's Digital Solutions on 25 August 2026
Server Killers Norway ·Digital Provider +1 Russian Threat Actors "Server Killers" Conducted DDoS Attack On Norwegian Digitalisation Agency On 24 August 2026 24 Aug 2026
Incident · Low severity 24 Aug 2026
Server Killers Norway ·Digital Provider +1
Russian Threat Actors "Server Killers" Conducted DDoS Attack On Norwegian Digitalisation Agency On 24 August 2026
USFederal Bureau of Investigation Mabna Institute US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026 Criminal proceedings 18 Aug 2026
Criminal proceedings 18 Aug 2026
USFederal Bureau of Investigation Mabna Institute
US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026
WaterPlum (313 General Bureau of the Munitions Industry Department) ADAEAFAL+185189 countries ·End user(s) / specially protected groups North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026 1 Dec 2025
Incident · Low severity 1 Dec 2025
WaterPlum (313 General Bureau of the Munitions Industry Department) ADAEAFAL+185189 countries ·End user(s) / specially protected groups
North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026
MuddyWater (MOIS) ADAEAFAL+185189 countries ·Civil service / administration +4 Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018 1 Jan 2018
Incident 1 Jan 2018
MuddyWater (MOIS) ADAEAFAL+185189 countries ·Civil service / administration +4
Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018
COBALT DICKENS (Mabna Institute) USADAEAF+185189 countries ·Civil service / administration +5 Iranian State-Sponsored Hacking Group Mabna Institute Stole Academic Data from Universities and Companies Worldwide Around 2013 1 Jan 2013
Incident · Low severity 1 Jan 2013
COBALT DICKENS (Mabna Institute) USADAEAF+185189 countries ·Civil service / administration +5
Iranian State-Sponsored Hacking Group Mabna Institute Stole Academic Data from Universities and Companies Worldwide Around 2013
Showing the 8 most recent of 8 Open all in advanced search
Search