France investigates 'foreign interference' after malware found on ferry

Last Friday, French police arrested two suspicious crew members on a passenger ferry. The suspects allegedly attempted to gain unauthorized access to the ship's data processing systems.

This was reported by the Associated Press (AP), which stated that the suspects are Latvian and a Bulgarian. The French counter-intelligence agency is investigating the alleged cyberattack, which took place on an international passenger ferry that was not named. The Latvian crew member is reportedly in custody and accused of acting for an unidentified foreign power. Authorities accuse the detained Latvian of criminal conspiracy and “hacking”-related offenses with the aim of serving the interests of an unnamed foreign power. The Bulgarian was released after questioning.

Clues point to Russia

However, France's Interior Minister Laurent Nunez indicated that Russia is suspected, stating: “Currently, foreign interference very often comes from the same country.” This aligns with observations by Ukraine's European allies that Russia is waging a hybrid war against them, using methods such as sabotage, cyberattacks, disinformation, and other hostile activities.

Italian authorities provided the French Directorate-General for Internal Security with the information that computer systems on board the ferry in the port of Sète were infected with software sometimes used by cybercriminals, according to the Paris prosecutor's office. A Remote Access Trojan (RAT) may have been used to take control of the ferry's computers. Interior Minister Nunez stated that this is a very serious matter. It is not known whether the suspects intended to hijack the ferry. He added that the investigations seem to be following a trail of interference, specifically foreign interference.

Searches were reportedly carried out in Latvia, but the Latvian police have not commented. The ferry's computers were checked for security, and the ferry has been returned to service.

(dmk)