Bosnia Lacks Capacity to Fight Millions of Cyber Attacks Monthly, Report Warns

The first report on cyber threats in Bosnia and Herzegovina has said the country is facing millions of cyber attacks each month, while lacking the strategies, legislation and capacity to protect its citizens, institutions and companies. 

“During November 2022, a wide range of targets were subject to over 9.2 million distinct cyber attacks recorded in Bosnia and Herzegovina,” it was said on Friday during a presentation of the report compiled by the Center for Cybersecurity Excellence, CSEC, and BIRN. 

With the help and support of the United Kingdom, CSEC monitored the number of attacks using two devices that simulate a digital target.

The most common form of cyber attacks recorded were distributed denial-of-service attacks, or DDoS, which aim to disable or disrupt the functioning of IT systems by bombarding them simultaneously from many different sources. 

“This report also highlights the lack of adequate computer emergency response teams, CERTs, as a key problem in Bosnia, along with the prolonged absence of an effective legislative framework,” it was added during the presentation before the parliament of Bosnia and Herzegovina, whose systems were targeted in attacks in September last year, as well as IT experts and lawmakers. 

CSEC recorded 3.8 million DDoS attacks in Bosnia in November last year alone, with media outlets being frequent targets. In addition to DDoS attacks, attackers often attempted to control computers, as well as exploit various databases and devices with Android operating systems.

However, since only two devices were used to monitor the attacks, the coverage of this threat report is not comprehensive, and it is assumed that the total number of attacks is far higher.

An updated threat report will be published every six months, providing the latest assessment of trends in the field of cyber threats and practical advice on how to protect against them.

Turkey Accused of ‘Persecuting’ Critical Media Ahead of Key Elections

A group of international media organisations and rights groups in a joint statement have accused the Turkish broadcasting regulator of punishing critical reporting ahead of important general and presidential elections on May 14.

“Twenty press freedom, freedom of expression and human rights organizations call on Turkey’s broadcast regulator (RTUK) to immediately stop fining broadcasters for their critical reporting. Journalists and broadcasters must be allowed to do their jobs of informing the public over critical issues and holding the government to account,” the joint statement said on Thursday.

Twenty media and human rights organizations, including Freedom House, the International Press Institute, the European Centre for Press and Media Freedom, the International Federation of Journalists, and Reporters Without Borders, are involved in this initiative.

The Radio and Television Supreme Council, RTUK, is a state agency that monitors and sanctions radio and television broadcasts.

“Instead of upholding freedom of expression and media pluralism in the country, RTUK is being weaponized by the governing parties to silence legitimate criticism and provide them with an unfair advantage in the May 2023 elections. This suppression of public debate is undermining the electoral process,” the joint statement said.

In recent months, following devastating earthquakes in southern Turkey, RTUK has been increasingly penalising TV channels for their critical coverage of government policies and election processes.

“We view these incidents as part of the Turkish government’s systematic attempt to stifle critical reporting and to control the information flow ahead of Turkey’s presidential and parliamentary elections on May 14, 2023,” the statement said.

“We call on the Turkish broadcast regulator, RTUK, to immediately end the persecution of independent broadcasters and act according to its mandate to secure freedom of expression and media pluralism in the country.”

The opposition, experts and international rights groups have accused the RTUK of going all out to crush the remaining independent media and of acting as a tool of the authoritarian government of President Recep Tayyip Erdogan who faces the greatest challenge to his 21-year of rule in elections on May 14.

The joint statement highlighted that in 2022 alone, RTUK issued 54 penalties to five independent broadcasters totalling 17.335.000 Turkish Lira (approximately 823,000 euros) in fines. By contrast, government channels received four penalties totalling 1,674.000 TL (about 80,000 euros).

Turkey ranked in 153rd place out of 180 countries in 2022 in the latest press freedom index of watchdog organisation Reporters Without Borders, RSF, which classifies the Turkish government’s control over media outlets as high.

Attack on Kosovo Journalist Condemned

Journalists’ associations and political leaders on Wednesday condemned the assault on Kosovo journalist Valon Syla who received medical treatment after the attack in a Pristina neighbourhood.

Kosovo Police confirmed that Syla was assaulted in Pristina’s Bregu i Diellit (Sunny Hill) neighbourhood around 22:30 on Tuesday. He was going home after participating in a TV debate.

“The victim received [medical] treatment while the others [attackers] fled the scene in a car with local licence plates,” police said in a statement.

Pristina Basic Prosecution said that Syla was assaulted by three persons and sustained body injuries.

No arrest has been made.

Speaking from Pristina hospital after receiving treatment, Syla told TV Dukagjini that he was assaulted by “three Islamic fanatics”.

“It all happened too quickly,” Syla, who is CeO and Director of Kosovo news portal Gazeta Metro, said.

Through a Facebook post on Wednesday, Syla alleged that the attack is linked with comments he made on social media about a local imam who received a Mercedes car as a gift some days ago from worshippers, on the day he retired.

“I don’t know if anyone ordered it [the attack] but it was enough to cause serious injuries on my head and my left hand,” Syla said.

The attack was condemned by the Association of Journalists of Kosovo, AJK, which asked for an “urgent investigation” into the incident.

“This attack is totally unacceptable and is an attempt to hinder and undermine freedom of speech and freedom of media in Kosovo,” the AJK said.

“AJK calls on relevant institutions to take necessary measures to urgently arrest those responsible for the attack and bring them before the justice,” it added.

The attack was also condemned by the European Federation of Journalists. “We call on the police and prosecutor to investigate the case and bring the perpetrators to justice,” EFJ said on Twitter.

Condemning the attack and wishing the journalist a speedy recovery, Kosovo’s Prime Minister, Albin Kurti, on Wednesday called it “intolerable and unacceptable”.

“Disagreements on beliefs and positions cannot and should not be a cause for physical attacks. In a democratic society which we proudly present and promote, we cannot allow that fear from free speech overweight freedom of speech,” Kurti said during a cabinet meeting.

Politicians and Public Targeted in Online Intimidation Cases

Political targeting has become a worrying issue in the Balkans, with threats and online harassment of politicians and individuals who criticise people in power, according to BIRN’s review of digital violations for the period from January to March this year.

Several cases of political censorship, intimidation and legal suppression of dissent have been reported across the region in the period.

These incidents include threatening messages sent to political figures on Twitter, the erasure of the digital profiles of dissenters, and legal indictments of critical journalists.

The spread of misinformation on social media platforms has also continued to be a significant problem, with cases reported in Hungary, Romania, Montenegro and Croatia.

Several countries, including Albania, Serbia, Hungary, North Macedonia, Romania and Croatia, have reported an increase in cyber threats in recent months.

Phishing attacks have been rampant, with hackers sending malicious messages and emails posing as reputable organisations and authorities, such as Díjnet in Hungary and Interpol in Serbia. Companies and individuals have also fallen victim to online scams, losing thousands of euros in the process.

Politicians and public figures under attack

There has been an increasing number of cases involving the political of targeting of critics in the period from January to March. Such actions have a chilling effect on freedom of speech and the press, as well as on the ability of civil society to hold governments accountable for their actions.


President of Serbia, Aleksandar Vucic addresses the media after the High-level Meeting of the Belgrade-Pristina Dialogue in Ohrid, Republic of North Macedonia, 18 March 2023. Photo: EPA-EFE/GEORGI LICOVSKI

On March 30, users of an anonymous forum on the Klix.ba website made alarming calls for the liquidation of two high-profile Bosnian individuals: Foreign Minister Elmedin Konakovic and Nermin Niksic, the president of the Social Democratic Party.  This caused widespread concern and condemnation among politicians and members of the public alike. Many politicians called for the security agencies to take action.

On January 16, Biljana Stojkovic, co-president of the Zajedno party in Serbia, was alarmed when she received a threatening message on Twitter. She reported the incident to the police, but said that she could not shake off the feeling of being watched and targeted.

The same day, Petar Djuric, president of the Citizens’ Association, was detained for criticising Serbian President Aleksandar Vucic on social media. He was taken into custody by the Service for Combatting Organised Crime, SBPOK, questioned and then later released.

Another incident occurred in Montenegro, where the opposition Social Democratic Party MP Draginja Vuksanovic Stankovic was insulted in obscene and degrading comments on daily newspaper Vijesti’s Facebook page on January 12.

Meanwhile online political censorship is a tool that has been used by those in power. In Hungary, the Facebook profile of politician Orsolya Besenyi, who supported by the ruling Fideszparty but ran in the Jászberény local by-election as an independent, disappeared on January 16. Several days of posts on the Fidesz Jászság Facebook page were also deleted after Besenyi lost the by-election. The erasure of her digital presence was seen as a warning to other dissenters.

Online intimidation has also been used to silence critics in Hungary. After Ákos Hadházy, an independent MEP, reported that István Eged, the Fidesz party mayor of Pétervására, used EU funds for the benefit of his family, Eged sent Hadházy a threatening message on January 30, saying: “Be sure to see me again. … You will beg.” The message was seen as an indication that Eged wanted to stop any scrutiny of his actions.

Another case showed how social media can also be used by members of the public to intimidate and threaten others.

In Bosnia and Herzegovina on January 15, Emir Suljagic, the director of the Srebrenica Memorial Centre, posted a series of tweets commenting on an attack on a group of Serbs in Sarajevo.

Suljagic’s tweets included a picture of Bosnian Serb soldiers on the hills above Sarajevo during the 1992-95 siege. A Twitter user named SavoljuB responded: “Once Republika Srpska becomes part of Serbia, Potocari [where the memorial centre is located] will be flattened with an excavator and turned into a landfill.”

Misinformation in Montenegro, Hungary, Romania, Croatia

The spread of misinformation remains a significant problem on social media platforms as several recent cases in Montenegro, Hungary, Romania and Croatia show.


Visiting Speaker of the Hungarian Parliament Laszlo Kover and the President of the Parliament of Montenegro Ivan Brajovic (unseen) arrive for a joint news conference following their meeting at the Vila Gorica in Podgorica, Montenegro, 10 September 2018. Photo: EPA-EFE/BORIS PEJOVIC

On February 21, the German ambassador to Podgorica, Peter Felten, accused the Montenegrin news website Borba of publishing falsehoods. Felten told the newspaper Vijesti that Borba published a false story about a presidential election survey and said the German embassy had never done such a survey.

In Hungary, after a far-right march in Budapest, extreme right-wing media outlets Vadhajtások and Pesti Srácok on February 11 falsely accused last MP András Jámbor, his movement Szikra and left-wing news Mérce of organising violence that broke out, despite evidence that foreign members of Antifa being responsible.

The personal data of Hungarian left-wing activists was also published on social media and Telegram, leading to threats of physical violence. Meanwhile, a manipulated photo of László Kövér, the ruling Fidesz party speaker of the Hungarian parliament, was circulated on Facebook on February 6, falsely showing Kövér as a young man standing next to János Kádár, who was the Communist leader of Hungary.

In Romania on March 9, the Defence Ministry issued a warning to the public about misinformation on social media platforms such as Facebook and Instagram regarding mandatory military mobilisation. The ministry identified at least seven misinformation campaigns on this subject since the start of the Russian war in Ukraine, with the latest targeting citizens of Bucharest. The ministry said it believes that the aim of the campaigns is to generate confusion, panic and uncertainty among the population.

Also in Romania, dozens of mainstream media websites shared a piece of false information on February 12 about a change in the Romanian Road Code making it mandatory for drivers to carry a shovel and a supply of sand in the car during winter months, with drivers who weren’t equipped facing fines of up to 600 euros. However, police confirmed that no such change had been made to the Road Code. No original source was established for the fake news, which was shared by media outlets with large followings, including Newsweek, Capital, Click and Antena 3.

On January 20, a fake news article entitled “Secret CDC report confirms that 118,000 young people ‘suddenly died’ after vaccination” was published by SHTFplan, a conspiracy theory website, and circulated on social media in Croatia. The article falsely claimed that US presidential medical advisor Dr. Anthony Fauci used propaganda, lies, and manipulation to force parents to vaccinate their children and that 118,000 young people died after receiving the COVID-19 vaccine.

However, none of the information in the article no unusual increase in deaths after vaccination against the coronavirus has been reported. Fact-checkers at Faktograf concluded that the story was false.

Navigating cybersecurity threats

In recent months, several cyber threats have been reported across Europe. On March 31, a 28-year-old man from Albania was arrested for engaging in online fraud. The man is believed to have illegally obtained 100,000 euros by stealing personal account information from Kosovo citizens on various social media platforms. Once the perpetrator gained access to the accounts, he proceeded to demand money from the victim’s family members and close acquaintances.


A photo illustration shows the logo of social media messaging application Telegram on a mobile telephone screen, in Paris, France, 27 January 2021. Photo: EPA-EFE/IAN LANGSDON

On March 21 in North Macedonia, scammers used several humanitarian cases to lure donations on various social media channels, posing as relatives or close friends of people who are in need of donations for operations or other reasons.

On January 19, Russian hackers launched targeted phishing attacks on popular Facebook pages of Hungarian influencers, while on January 25, people in Serbia received false malicious messages from the Stara Pazova Health Centre and the Moj Doktor website as part of a phishing campaign in Serbia.

In Croatia, a company from Valpovo was scammed out of 31,000 euros when an unknown perpetrator falsely presented themselves as a director and requested a transaction to an account of another foreign company on January 18.

On January 24 meanwhile, a company from Zagreb lost hundreds of thousands of euros in a matter of minutes in an online scam. An employee received a message to update the company’s mobile banking app, which led to several hundred thousand euros being paid from the company’s account to ones owned by the unknown perpetrator

Phishing attacks have also been on the rise, with unknown people sending emails on behalf of Díjnet, an electronic bill service in Hungary, the Hungarian police and Interpol, accusing the recipients of involvement in child pornography.

In Bosnia and Herzegovina, sellers on the OLX.ba platform were targeted by cyber fraudsters who contacted them via Viber or other communication networks and requested bank card data after agreeing to purchase an item. Similarly, Bosnian lawyer Veronika Jancik fell victim to internet fraud when an unknown person asked for a voucher worth around 25 euros using a relative’s fake Instagram profile.

On February 17, hackers broke into the email system of the International Investment Bank in Budapest in Hungary and stole emails, documents, and other sensitive information.

On February 22, an unknown perpetrator blackmailed a company in Osijek in Croatia by making some of its computer data inaccessible and demanding payment of 0.5 bitcoin (around 11,400 euros) to a virtual account in order to unlock it.

Turkish Opposition Slates New Social Media Regulation Ahead of Elections

Good Party leader Meral Aksener has accused President Recep Tayyip Erdogan’s government of increasing government control and  censorship ahead of vital May 14 elections with a new regulation of the Information and Communication Technologies Authority, BTK.

“Only 39 days left to the elections and the BTK has put a new social media regulation into force. According to this, social media platforms will have to deliver personal information to the authorities without any court decision. Finding an excuse for an investigation will be enough,” Aksener said in parliament.

Aksener said the personal information of people who have not been proved guilty by courts may be demanded for such vaguely defined reasons as “spreading disinformation”, crimes against “state secrets, integrity of the state” and crimes against “constitutional order”.

The new regulation of the BTK was published in the Official Gazette on Saturday.

It is based on the recent contorversial disinformation law adopted by parliament in October 2021 but brings even more restrictions.

According to the new regulation, social media platforms will have to store users’ data in Turkey and will must share it with the authorities if they ask for it.

“If social networks act against their information-sharing responsibility, their bandwidth will be reduced by 90 per cent,” the new regulation says.

“In other words, the ENAG [an independent platform evaluating the inflation rate] may be silenced for spreading misleading information. Moreover, not only the ENAG, but also accounts that share the ENAG figures will be silenced,” Aksener said.

Aksener added another possible example about the recent earthquake disaster; the government of President Recep Tayyip Erdogan had been criticised for its slow and ineffective response to it.

“People who say that there were no search-and-rescue missions for four days will be silenced for acting against the integrity of the state,” she claimed..

The new regulation has worried rights groups and experts, fearing more censorship ahead of highly critical parliamentary and presidential elections on May 14 that pose a major challenge to Erdogan’s 21 years of rule.

“The so-called disinformation law in Turkey … came into full effect a few days ago and has already been worsened by the recent regulation announced by the BTK,” said Gurkan Ozturan, coordinator of Media Freedom Rapid Response, MFRR, at the European Centre for Press and Media Freedom.

“The new directive, which again is written with ambiguous wording that can cause arbitrary implementation, proposes heavy violations of users’ rights to anonymity, privacy and it imposes duties to monitor people’s online activities at all times for service providers,” he added.

According to Ozturan, the regulation targets citizens’ right to access information as well as “media freedom, making it compulsory to amplify news published from the perspective of the government”.

“Ahead of elections in May, this directive poses a crucial threat to media freedom and such coervice and over the line applications should be abolished.” Ozturan concluded.

Erdoigan’s government has regularly changed regulations and laws to increase its control over social media networks in recent years.

In February, it blocked most access to Twitter, Tiktok and slowed down the internet in the country as public anger mounted about the government’s response to the quake crisis.

BIRD Community

Are you a professional journalist or a media worker looking for an easily searchable and comprehensive database and interested in safely (re)connecting with more than thousands of colleagues from Southeastern and Central Europe?

We created BIRD Community, a place where you can have it all!

Join Now