Orange Spain

Orange Spain, a major Spanish network provider, was disrupted by a cyberattack on January 3, 2024. The threat actor known as 'Snow' compromised Orange Spain's RIPE account, leading to significant internet outages. This incident underscores the vulnerability of critical internet infrastructure and highlights the importance of robust cybersecurity measures. The outage was due to a misconfiguration of Border Gateway Protocol (BGP) routing and the implementation of an invalid Resource Public Key Infrastructure (RPKI). Felipe Cañizares, CTO of DMNTR Network Solutions, speculated that Orange Spain might not have implemented two-factor authentication on the account, potentially making it easier for the threat actor to gain unauthorized access. In response to the incident, Orange Spain acted swiftly to restore services and confirmed the unauthorized access to its RIPE account. This rapid response demonstrates their commitment to ensuring the integrity of their systems and services. Nevertheless, the event serves as a stark reminder of the potential risks associated with inadequate cybersecurity measures.