Poland Arrests Suspected DDoS Operator and Detains Defense Ministry Employee for Espionage

Poland’s Central Bureau for Combating Cybercrime (CBZC) arrested a 20-year-old suspected of conducting global DDoS attacks against high-profile and strategically important websites. Authorities said the suspect used a multi-layered botnet control architecture involving C2 “stressers” and command-and-control nodes (CNC), and seized computer equipment allegedly used to host and distribute DDoS tooling; the suspect reportedly confessed to most charges, was released on bail after a formal statement, and faces up to five years in prison if convicted.

Separately, Polish authorities detained a 60-year-old civilian employee in the Ministry of National Defense’s strategy and planning department on suspicion of espionage for a foreign intelligence service, with Polish officials indicating links to Russian and Belarusian services. Counterintelligence searched the suspect’s office and residence and seized phones, computers, and storage media; prosecutors filed espionage charges while officials cited “extensive evidence” and framed the case as part of broader hybrid warfare pressure on Poland, including sabotage, disinformation, and cyber activity attributed to Russia-linked actors.