Movistar SMEs suffered a fall while pro-Russian attacks were being recorded in Spain

In recent days, the drop in services provided by Movistar SMEs has coincided with a wave of computer attacks attributed to pro-Russian groups against Spanish institutions. According to recently published information, there is no official confirmation that it was a cyberattack against the operator, but the temporary coincidence has raised concern in the business environment. We analyze what has happened, what it involves and what organizations should consider.

‍

What is known about the fall of Movistar SMEs?

As published by Vozpópuli, several Movistar SMEs customers experienced interruptions in their communication services.

At the same time, the pro-Russian group Noname057 (16) claimed denial of service (DDoS) attacks against Spanish public bodies.

As of today:

• There is no official confirmation that the fall of Movistar Pymes is due to a computer attack.
• No security breach or data exfiltration has been reported.
• The impact was limited to the availability of certain services.

It's important to differentiate between a technical interrupt and a security breach. A breach involves unauthorized access to systems or data; a service outage can be due to both technical incidents and saturation attacks.

‍

Why telecommunications are a strategic objective

The telecommunications sector is part of critical infrastructures. Any incident affecting an operator directly impacts thousands of companies that rely on connectivity to operate.

The reasons why this sector is a common target are clear:

1. High media visibility.
2. Direct impact on economic activity.
3. Cascading effect on other organizations.
4. Strategic value in geopolitical contexts.

DDoS attacks, such as those claimed by Noname057 (16), seek precisely that: to interrupt availability and generate institutional pressure.

‍

How do these types of attacks occur

Distributed denial of service (DDoS) attacks work by saturating servers or network infrastructures with a massive volume of malicious traffic.

This type of computer attack usually occurs through:

• Networks of compromised devices (botnets).
• Coordinated delivery of millions of simultaneous requests
• Exploitation of vulnerabilities in exposed services.
• Use of amplification techniques.

Its purpose is not necessarily to steal information, but to prevent legitimate access to services.

In recent contexts, these attacks have been directed against public bodies, municipalities and other entities linked to critical infrastructure.

‍

Key lessons for companies

Although the fall is not confirmed as a cyberattack, the episode leaves relevant lessons for any organization:

• Availability is an essential part of enterprise IT security.
• Relying on a single vendor increases operational risk.
• Contingency plans are required for connectivity interruptions.
• Proactive monitoring reduces detection time.

These types of incidents show that cybersecurity is not limited to protecting data, but also to ensuring business continuity.

‍

Cybersecurity as a strategic priority

In an environment where hacktivist groups combine political motivations with media attacks, companies must assume that the risk is constant.

The question is not whether there will be new cyberattacks against critical infrastructure or strategic suppliers, but whether each organization is prepared to:

• Detect incidents quickly.
• Activate continuity plans.
• Keep it operational even in the face of external interruptions.
• Assess your actual exposure to security breaches.

Digital resilience is no longer optional.

‍

Apolo Cybersecurity: Anticipating Risk

At Apolo Cybersecurity, we help organizations strengthen their business IT security by:

• 24/7 SOC services.
• Vulnerability analysis and intrusion testing.
• CISO as a Service.
• Continuity and incident response plans.

Incidents such as the fall of Movistar SMEs, whether or not they coincide with a cyberattack, demonstrate that preparation makes a difference.

If you want to evaluate your company's real level of exposure and strengthen your capacity to respond to computer attacks or critical interruptions, our team can help you design a strategy adapted to your organization.