Reports from Bloomberg and Reuters indicate that Ukraine has taken credit for a cyber attack on Russia’s state media company, VGTRK, which caused disruptions in its operations.
VGTRK confirmed the incident, labeling it as an “unprecedented hacker attack” with no major damage, although attempts were made to hinder radio and TV broadcasts.
According to Gazeta.ru, the hackers allegedly wiped out all data, including backups, from VGTRK’s servers.
A source told Reuters that Ukrainian hackers staged the attack as a birthday “gift” to Putin, targeting the all-Russian state TV and radio broadcasting company.
The attack is believed to be the work of a pro-Ukrainian hacker group known as Sudo rm-RF. The Russian government is conducting an ongoing investigation and attributes the attack to the anti-Russian agenda of the West.
These cyber attacks continue amid the ongoing conflict between Russia and Ukraine, which began in February 2022. Ukraine’s cybersecurity agency has reported a rise in cyber attacks targeting security, defense, and energy sectors, with over 1,700 incidents recorded in the first half of 2024.
The attacks have shifted focus towards critical areas related to the conflict, aiming to maintain a presence in systems pertinent to war and politics. Adversaries have adopted tactics to evade detection, with various malware strains and intrusion methods being employed.
Security experts have highlighted the activities of threat actors such as UAC-0027 and UAC-0184 linked to espionage and malware distribution in Ukraine.
The threat from the Russian hacking group Gamaredon remains significant, with persistent targeting and deployment of malicious tools observed in Ukraine. The conflict intensifies, reflecting the escalating cyber activities in the region.
To counter these threats, cybersecurity agencies are vigilant in monitoring and responding to cyber attacks targeting critical infrastructure and sensitive information during the conflict.
