Coordinated cyberattacks targeted over 30 wind and solar farms, a private manufacturing company, and a sizable combined heat and power plant (CHP) that provides heat to nearly half a million people in Poland, according to CERT Polska, the country's computer emergency response team This article explores known static tundra. . The event happened on December 29, 2025.

The attacks have been linked by the agency to a threat cluster known as Static Tundra, which is also monitored as Berserk Bear, Blue Kraken, Crouching Yeti, Dragonfly, Energetic Bear, Ghost Blizzard (previously Bromine), and Havex. It is determined that Static Tundra is associated with the Center 16 unit of the Russian Federal Security Service (FSB).

Notably, a different Russian state-sponsored hacking group called Sandworm was identified as the source of the activity with a moderate degree of confidence in recent reports from ESET and Dragos. "Files and emails pertaining to SCADA systems, OT network modernization, and technical work conducted within the organizations were of special interest to the attacker."