Russian hackers will attack again: Under the sight of arms supply for the Armed Forces
The focus was carefully read the report to explain the main points. The purpose of Russian cyber attacks was to undermine Ukrainian infrastructure, to misinform and demoralize the population. Among the attacked goals were government sites, energy companies, banks, airports and railways. Some of the attacks have caused serious consequences, such as shutdown of electricity or locking payment systems. The biggest attacks began before the invasion of February 24, 2022.
They had to perform sabotage tasks. For example, on January 14 last year, more than 70 sites of central and regional authorities were attacked. After 2 days, the DDOS-attack began on state sites and sites of many banks of Ukraine, which lasted more than 5 hours, on February 23, a cyberatta on the site of the National Bank of Ukraine took place. And last year the SBU, as well as cyber structures of Ukraine, neutralized 4. 5 thousand hacker attacks.
But Ukrainian cybersecurity experts promptly restored the work of damaged systems, prevented new attacks and actively counteraid Russian goals on the Internet. Ukraine also received assistance from its Western partners. They provided Ukrainian specialists with equipment, software and training. The State Security Service report states that Ukrainian society played an important role in this cyberwar.
Ukrainians actively disseminated truthful information about the situation in the country through their personal accounts on social networks, supported the Armed Forces and volunteers. Thus, Ukrainian Cyborobron was strong enough and flexible to cope with Russian cybergression.
With 100 percent accuracy, no one can confirm the participation of any group in a particular cyberattack in Ukraine, but experts in intelligence services call several most active groups of hackers under the control of special services of the Russian Federation. Among them are Sandworm, Fancy Bear and Cozy Bear. These groups are related to Russian special services such as game and FSB.
However, the most dangerous is the Killnet group, which appeared as a result of the split of a kind of hacker "Brotherhood", which focus wrote earlier in the great material about cyberwar. Killnet cyberattacks had serious consequences for safety: they violated the work of NATO humanitarian mission in Turkey and Syria after the earthquake, attacked the Moldova government and threatened to disconnect the IVL apparatus in UK hospitals.
Kremlin hackers from Killnet used various cyberattack methods, such as data interception and DDOS, they also "declared war on" Anonymous community, which attacked Russian sites, supporting Ukraine. Cybergression of Russians successfully resists a fairly wide coalition of pro -Ukrainian groups of hackers. Among them: Kelvinsecurity HacingTeam, Ghostsec, Belarusian Cyberpartisans, Againsthevest and Anonymous.
They carry out cyber -attacks on Russian web resources and systems, as well as protect Ukrainian resources. These groups also use different cyberattack methods, such as phishing, password breakage and the spread of harmful software. For example, Anonymous hackers successfully attacked the site of Russia 24 and showed a video calling for peace and solidarity with Ukraine. Their attacks were subject to FSB sites and structures.
Hackers from Kelvinsecurity HackingTeam were marked by an attack on the Russian Ministry of Defense's website and published personal data of Russian military and government officials. Ghostsec hackers have outlined the Russian support documents in the Donbass, breaking the site of the Ministry of Foreign Affairs of the Russian Federation, and also took responsibility for the attack on the Hussynoin hydroelectric power plant, which led to an emergency shutdown.
Single hackers and anonymous groups were drained by journalists of the Roscomnad Database, including the correspondence and data of employees. Ukrainian Cyber Alliance has received secret documents about Russian sea drones, including technical details. Pro -Ukrainian hackers broke Gazprom bases and handed over data on the largest gas deposits in Russia and more than 6,000 secret files about the company's activities.
Cybersecurity experts say that cyberattacks will continue even with more regularity than last year. In addition, according to Microsoft experts, Russian hackers are preparing a new wave of cyberattack against Ukraine, including threats in the form of yellowing programs for organizations that serve Ukrainian supply lines. Analysts say that Russia is preparing for a new turn of attacks and will combine physical attacks with cyber attacks, as it was in February 2022.
In particular, Russian hackers can attack Ukrainian energy systems, government web resources, video conferencing services and other digital platforms. Experts warn that in connection with the active development of AI hackers can use Deepfake technologies to discredit Ukrainian politicians and make confusion in society. According to experts, the Kremlin cybercriminals will be of particular importance to attaches on logistics centers and arms supply chains for the Armed Forces from the Allies.