Arrests, Data Breaches, Ransomware, and False Bomb Threats Rock Online Environments

Romania cracks down on online violations

Romania has taken a strong stance against online violations with a series of arrests and convictions in recent months. Law enforcement agencies have been cracking down on individuals and organizations engaging in illegal activities, resulting in arrests and convictions.


A banner, reading ‘YOU KILL THEM !!!’, and a pair of children shoes were left by a protester at the entrance of the Interior Ministry building during a protest against the way Romanian authorities handled the kidnapping and killing of a 15-years old girl in the southern city of Caracal, in front of the Interior Ministry Headquarters, in Bucharest, Romania, 03 August 2019. Photo: EPA-EFE/ROBERT GHEMENT

Romania has seen a number of digital rights violations that led to arrests and convictions of perpetrators. A man accused of rape and child pornography was arrested in Gorj, southwest Romania, on December 17. According to the Directorate for Investigating Organized Crime and Corruption, the man raped a 15-year-old girl in March 2022. He also filmed the teen’s ordeal and shared the pornographic material with on Facebook.

On December 22, the Directorate for Investigating Organized Crime and Corruption dropped a child pornography probe based on a tip from the National Center for Missing & Exploited Children, NCMEC.

The US-based NGO had alerted Romanian authorities after detecting pornographic material involving a Romanian teen girl being shared on Instagram by an IP address in Alba County, in central Romania. The tip led prosecutors to a 15-year-old boy. He admitted guilt. However, prosecutors argued that the culprit had limited consent due to his youth.

In another incident, on December 31, Romanian authorities arrested influencers brothers Andrew and Tristan Tate in a human trafficking probe involving their video chat business in Bucharest.

Prosecutors at the Directorate for Investigating Organized Crime and Corruption identified six women who the Tate brothers on dating apps first contacted. Another man was arrested on January 12 for harassing and blackmailing his ex-girlfriend by publishing pornographic content about her on Facebook. The woman contacted the authorities, who intervened after the man destroyed the victim’s car.

Finally, on January 13, a court in Craiova, southwestern Romania, sentenced a man to eight months in prison and payment of 6,000 euros in moral damages to the three policemen he harassed on Facebook. Prosecutors said the suspect gathered information about one of the policemen and his relatives and then sent messages to public institutions containing embarrassing details about the man’s marriage. He also published the details on multiple fake accounts he set up on Facebook. The harassment started after one of the victims punished a colleague, who was discovered passing confidential information on police investigations to the suspect.

False bomb threats spread fear

In the second half of December, there were a number of incidents where false bomb threats were sent through social media and other forms of technology. Several incidents were recorded in Hungary, North Macedonia, and Bosnia and Herzegovina where false bomb threats were made through technology, leading to the spread of fear and misinformation through social networks.


An outside view of the new office building of Raiffeisen Bank in Sarajevo, 16 April 2009. Photo: EPA/FEHIM DEMIR

On December 16, 2020, in Hungary, an individual posted a comment on an event page on a social networking site stating; “There will be a pipe bomb under some chairs.” Police were able to track down and arrest the person responsible. This incident not only caused fear among those who saw the comment but diverted a significant amount of resources from police to investigate and prevent any potential harm.

Similarly, on December 17, 2020, in North Macedonia, a 63-year-old resident of Tetovo was arrested for making false bomb threats in the town of Delchevo. The individual said by phone that he had planted bombs in several locations but was quickly caught by the police. He faces a criminal charge of terrorism and a minimum sentence of eight years in prison if found guilty.

On December 19, 2020, in Bosnia, Raiffeisen bank branches in the Sarajevo area received threats of planted bombs, leading to the evacuation of all staff for security reasons. The bank informed the authorities and resumed operations after the premises were inspected. This incident not only disrupted the operations of the bank but also instilled fear among employees and customers.

These digital rights violations demonstrate the dangerous potential of technology when used irresponsibly. Using social media and other forms of technology to make false bomb threats is a crime that can lead to severe punishment and harms individuals, communities and institutions. These events highlight the importance of responsible use of technology and the need for effective measures to prevent such incidents from occurring in the future.

Serbia and Romania Hit by Cyberattacks, Data Breaches and Ransomware Attacks

In December and January, Serbia and Romania were hit by a series of cyberattacks, resulting in data breaches and ransomware infections. On December 12, the personal data of thousands of users of a popular Serbian tech forum were leaked online. On January 3, a Romanian hospital was targeted by hackers, losing access to a database of patients’ personal information and suffering a ransomware attack.


A Romanian man passes in front of a shop window of an Orange store that displays a huge 5G advertise banner, in Bucharest, Romania, 19 October 2020. Photo: EPA-EFE/ROBERT GHEMENT

On December 12, a major data breach occurred at Benchmark, a popular Serbian tech forum, when the personal data of over 90,000 users was leaked online. The dataset included sensitive information such as usernames, email addresses, and IP addresses. The incident caused widespread concern among the forum’s users, many of whom were worried about the potential misuse of their personal information. The forum launched an investigation and issued a statement apologizing for the breach and assuring users that they were taking steps to prevent such incidents.

On January 3, a cyber-attack targeted the Botosani Rehabilitation Hospital in northeast Romania. Hackers gained access to the hospital’s servers using the computer of an IT contractor and infected them with Phobos ransomware. As a result, the hospital lost access to a database containing the personal information of patients. The attack also had a major impact on the hospital’s operations, as it was unable to get its invoices paid by the National Health Insurance for the last month of 2022, causing financial strain. The hospital reported the incident to the authorities and launched an investigation to identify the attackers.

Montenegro Quashes Drug Case Against Investigative Journalist

Montenegrin investigative journalist Jovo Martinovic (left) arriving at court in Podgorica. Photo: BIRN/Samir Kajosevic

Montenegro’s Appeals Court on Tuesday finally ended the much-criticised case against prominent investigative journalist Jovo Martinovic, who had been sentenced in October 2020 to a year in prison for drug trafficking.

The Appeals Court delivered its verdict after the Montenegrin Supreme Court last June ordered a second retrial for Martinovic.

“After more than seven years of court proceedings and 15 months of detention, I was finally declared innocent. It was a terrible burden, but when your conscience is clear and you know that you are innocent, then everything can be endured,” Martinovic told BIRN.

Martinovic was arrested in October 2015 alongside 17 others from Montenegro in a joint police operation conducted with Croatian police. He spent almost a year and a half in custody before being released in January 2017 ahead of the trial.

He was convicted in the first-instance ruling in January 2019 of drug trafficking and membership of a criminal organisation, but the Appeals Court overturned the verdict and ordered the first retrial, which again ended with a conviction.

The journalist always insisted he had made contacts with alleged drug traffickers only as part of his legitimate reporting work.

Martinovic had made contact in 2015 with two of the 17 suspects who were arrested: Dusko Martinovic – no relation to the journalist – and Namik Selmanovic.

Dusko Martinovic, the main suspect in the case, was also a convicted member of a gang of jewel thieves known as the Pink Panthers.

Operating in the US, Europe, the Middle East and Asia, they are believed to have stolen hundreds of millions of euros’ worth of jewellery.

Journalist Martinovic worked with Dusko Martinovic on a series of TV shows about the robbers produced by the Vice media group.

He worked alongside Selmanovic when a French production company, CAPA Presse, hired them to contribute to research on a documentary about weapons smuggling.

Dusko Martinovic was sentenced to six years and three months in prison in January 2019. Selmanovic has turned state’s evidence.

The European Commission’s report last year about Montenegro’s progress towards membership warned that the conviction of the journalist raises concerns about reporters’ ability to perform their duties professionally and without fear of legal repercussions in the country.

TIMELINE: Iranian Hacker Attack on Government Sites

“If you talk to any bank manager they’ll tell you how many daily attacks each banking facility or mobile phone has,” Balluku told reporters in October.

However, Investigators from Microsoft and the US Federal Bureau of Investigation, FBI, found that the hackers had in fact breached the system more than a year before, that the official systems were compromised and that Iranian hackers were to blame.

Iran has been angered by the fact Albania has given refuge to an opposition movement that authorities in Tehran say is a terrorist group.

Experts say the hackers’ targets can be considered “critical infrastructure”, particularly the State Police. Private emails sent and received by former Chief of Police Gledis Nano have leaked, as has a database containing the personal data of some 100,000 individuals, including names, ID numbers, and place of birth.


Printscreen from Homeland Justice webpage

Homeland Justice online presence:

1.Webpage: homeland justice

2.Telegram group: Homeland Justice

They also had an account on Twitter which can no longer be found.‘Homeland Justice’ operated through a website of the same name and which has been banned in Albania. Of late the group has been publishing material on its Telegram channel, also named Homeland Justice. The leaks recently came every Sunday night and most recently concerns two institutions: the State Police and the intelligence service, State Service Information.

BIRN has previously profiled the group and the political messages that accompany its activities. These almost exclusively pertain to the exiled Iranian dissidents of the People’s Mujahedin of Iran, MEK.

“Why did this not happen before? Because there was no ‘conflict’,” said Xhavit Shala, head of the Albania Academy of Security. “There are two cases when a cyber attack happens – for criminal reasons or political reasons. In the Albanian case, Iran asked for the destabilisation of public services in Albania because Albania has sheltered the Iranian opposition.”

Shala urged Albanian authorities to raise awareness about cyber threats.

“There is a strong need for awareness in all levels; individual, society and institutional,” he told BIRN. “There is also a need for training regarding cyber security.”

“The national security has been threatened. Their aim was to create some kind of chaos.”

No ‘secret’ or ‘top secret’ data has been leaked,” Shala said. “But if it was up to me, none of this should have been made public.”

The FBI determined that “Iranian state cyber actors” initially accessed the network some 14 months before launching a cyber attack in July that included “ransomware-style file encryption and disk wiping malware.”

Microsoft said it had identified four groups behind the attacks, “linked to the Iranian government.”

“Microsoft was able to prove with a high degree of certainty that a variety of Iranian groups were involved in this attack, with different actors responsible for different phases,” the report said.

RSF Urges Kosovo to Protect Journalists From Attacks in North


A BIRN team is attacked by a masked person in Mitrovica North on December 9, 2022. Photo: Screenshot from BIRN video

International media watchdog Reporters Without Borders, RSF, has called on Kosovo authorities and international security missions in the country to provide a better protection for journalists reporting from the north of Kosovo, where tensions have increased in recent months.

“The alarm signal sent by the wave of attacks against journalists in northern Kosovo must be taken seriously by Kosovo Police, the NATO-led Kosovo Force (KFOR) and the European Union Rule of Law Mission in Kosovo (EULEX) before there is another tragedy,” Pavol Szalai, Head of RSF’s European Union and Balkans desk, said on Thursday.

“We urge them to carry out a rapid and thorough investigation into these attacks, and to take additional protective measures in coordination with associations of journalists representing the two ethnic communities,” Szalai added.

Tensions have spiked in Serb-majority municipalities in northern Kosovo where on December 9 local Serbs set up barricades on two roads leading to the Jarinje and Bernjak crossing points with Serbia.

This was in reaction to the arrest of an ethnic Serbian former Kosovo Police officer. The government then closed the two crossing points and an uneasy standoff has persisted since then.

On Monday, a crew from Pristina-based TV Klan Kosova was assaulted near a newly-erected barricade near the ethnically mixed village of Cabra in Zubin Potok municipality.

Footage from the scene showed masked people throwing stones and shouting at the crew. No injuries were reported.

The Association of Journalists of Kosovo, AJK, condemned the attack and expressed concerns about the safety of journalists reporting from the volatile north.

“The AJK once again calls on relevant institutions to take measures and provide security for journalists and asks for journalists to be allowed to perform their duties without obstacles,” it said.

Monday’s incident was the third time that journalists have come under attack in northern Kosovo recently. On December 9, a crew of BIRN journalists was assaulted by a masked person in North Mitrovica. Several days later, a device exploded close to a TV Dukagjini journalist as she was reporting live.

Weeks before the barricades were erected, a crew of Insajderi news portal was attacked in Mitrovica North as they were filming a Kosovar school student being attacked. Cameraman Jetmir Muji was hospitalized.

RSF said it had learned that at least one media crew has been withdrawn from the field after their management decided the situation was too risky in light of the attacks.

“These threats to the media call into question respect for press freedom and the right to information about events in this country, which underwent a war in 1999 and now hopes to join the European Union,” RSF said.

Kosovo is ranked 61st out of 180 countries in RSF’s 2022 World Press Freedom Index.

Greek Journalism Still Awaits its #Metoo Moment

A BIRN investigation recently disclosed that female journalists are often afraid to report such abuse and harassment and ignore the procedures.

At the same time, most media in Greece do not even have the means to handle such cases.

BIRN’s research covered incidents over almost 30 years, from 1993 to 2021, documented through interviews with current and former media industry workers.

“I would have expected, from 2015 until today, more complaints and even named ones in the media. We journalists ask everyone to come forward, speak, and expose themselves, but we hesitate to do the same,” Lina Giannarou, editor at the Greek newspaper Kathimerini, told BIRN.

“One reason is the fear of being out of work. Those who have to tell such stories are now at an age when it would be difficult to recover professionally,” she said.

#metoo reaches Greece, but not journalism

In 2015 the model Ambra Gutierrez accused American film producer Harvey Weinstein of inappropriate behaviour. Her complaint was downplayed and buried by the media and the authorities.

It took two years and the investigations of journalists Jodi Kantor and Megan Twohey and their editor, Rebecca Corbett, at the New York Times for the scale of Weinstein’s abuse to become public.

The journalists revealed cases of sexual abuse by Weinstein stretching over nearly three decades. Their investigation became a book in 2019 and then a movie, “She said.” Weinstein is now in jail.

In 2017, Giannarou wrote about sexual harassment in the Greek media workplace. For the first time in the Greek media, a female journalist anonymously shared her experience of abuse.

After a lot of pressure because she did not give in to the perpetrator’s threats, the victim she wrote about was forced to change jobs. The abuser, Giannarou says, found himself apologizing to the Journalists’ Union for sexual harassment following a complaint by another colleague.

Photo: Veteran Olympic champion Sophia Bekatorou leaves the prosecutor’s office following her allegation of sexual assault by federation official 23 years ago, in Athens, Greece, 20 January 2021. The Athens public prosecutor’s office began an investigation into public revelations by Olympic sailing athlete Sofia Bekatorou against a man she named as having sexually molested her 23 years ago during preparations for the Sydney Olympics. EPA-EFE/YANNIS KOLESIDIS

Four women journalists openly shared their stories of abuse with the Greek media outlet Proto Thema but without naming the perpetrators.

It took almost four years, a pandemic, and the public confession of Olympic gold medalist Sofia Bekatorou, to journalist Evita Tsilochristou in the online edition of the women’s magazine Marie Claire about her own experience of sexual abuse, to activate the #metoo movement in Greece.

It was only then that people from the field of sports and culture shared their experiences publicly; some even decided to take legal action. In 2022, Greece saw its first four #metoo trials, but none concerned journalism.

But male journalists invited their female colleagues to speak out, some even naming the perpetrators on social networks. Some women shared stories of harassment and abuse on their social media accounts.

In a television interview, the well-known journalist Elli Stai referred to her own incident of harassment years ago.

However, none of these confessions triggered any journalistic or other investigation by the police or judicial authorities.

Evita Tsilochristou, digital director at Marie Claire, points out that supporting the victims in every way is critical for those who have not yet dared to speak out.

“Usually, victims speak up when they feel protected for some reason, when their careers are over, and they are not in danger, or when they are not directly threatened, as was the case during the pandemic,” she adds.

BIRN’s investigation into abuse and harassment

Photo: A man reads the front pages of the Greek newspapers hanging at a kiosk in central Athens, Greece, 24 March 2015. EPA/ORESTIS PANAGIOTOU

BIRN conducted a report in the beginning of 2022 about the complex picture of women’s role in newsrooms, news-making, and regional societies, more broadly in the Western Balkans.

Due to the lack of a media watchdog in Greece, BIRN investigated the harassment of Greek female journalists in their workplaces. The investigation was republished in Greek by the EFSYN newspaper and presented by several Greek media, such as Lifo, In.gr, ERT3, Proto Thema, Marie Claire, TVXS, Ladylike.gr, etc.

BIRN revealed that 43 per cent of the respondents said they had been victims of incidents of a sexual nature; 35 per cent of these cited verbal harassment, 81 per cent had faced harassment and abuse within the workplace; 51 per cent of the abusers were their hierarchical superiors.

Some 53.8 per cent of victims said they did not report the incidents due to fear that they would not receive any support. Two-thirds of the respondents claimed their media do not have procedures for employees to complain. Female journalists spoke to BIRN under the condition of anonymity.

“Belatedly, they have started speaking out in the media sector as well, but it will be a long time to see named complaints about abusers who are still active [working], as it is a very closed profession … An important chapter is also the attitude of men toward the victims, especially those in authority. Women need to feel comfortable, speak up and find support from them and when they see solidarity, they may start speaking up in the media space, which men mostly lead. Silence enables violence. Let’s leave the ‘why now?’ and get to the ‘never again’,” Tsilochristou said.

Media sector must recognise the problem

Photo: Women hold placards during a protest in support of women’s right to abortion, and against Greek Orthodox Church’s official position against abortions, in front of the Metropolitan Cathedral in Athens, Greece, 08 September 2022. EPA-EFE/KOSTAS TSIRONIS

After 23 years, Maria found the strength to speak out about her abuse.

“Because I have found the strength, I want to speak. When a woman confesses her harassment, it is good to keep quiet and listen to her. Even though there were complaints of abuse and harassment worldwide, journalism, for some reason that I cannot understand, has been left out,” she told BIRN.

As the mother of a little girl, she couldn’t imagine her daughter coming to her in a few years’ time and telling her she was facing harassment.

She wants her story to become the media sector’s problem, not hers only. For her, what is essential is the creation of a protective framework in which victims will feel safe to speak.

“If there were a framework, there would have been more complaints. I can’t understand why there shouldn’t be a framework where women and men can go and talk, where they will listen to you, trust you and find a solution. Let’s look at the problem first and then find solutions,” Maria said.

“My need now is not to name the abusers but for the problem to become the media’s problem,” she added.

“The Greek media is not homogenous, so it depends on where a #metoo ‘hits’. The media do not air their dirty laundry in public, so the shocks of any crises are absorbed. With its slow, outdated procedures, our union also does not favour complaints,” Giannarou told BIRN.

BIRN found also that Greek journalists’ unions lack procedures to report and record harassment.

Giannarou argues that the #metoo movement will help to protect the younger generation speak out.

“The younger ones, luckily, have a completely different experience, thanks to #metoo,” she said.

“Not only have men changed in recent years, but women have as well. Young girls are more equipped to deal with such situations, from a sexist comment in the newsroom to potential sexual harassment.”

 

BIRD Community

Are you a professional journalist or a media worker looking for an easily searchable and comprehensive database and interested in safely (re)connecting with more than thousands of colleagues from Southeastern and Central Europe?

We created BIRD Community, a place where you can have it all!

Join Now