Russia declared war against Ukraine on Feb. 24. Before, during and after the military campaign began, the CyberScoop staff has been tracking the cyber dimensions of the conflict.
Photo: Firefighters work on a fire on a building after bombings on the eastern Ukraine town of Chuguiv on Feb. 24, 2022, as Russian armed forces are trying to invade Ukraine from several directions. (ARIS MESSINIS/AFP via Getty Images)
Volunteer hacking efforts could unwittingly pull countries or private companies into a murky geopolitical mess, a researcher says.
Both efforts relied on malicious documents, officials said.
Russia want to control the internet in occupied Ukraine to feed the population disinformation — and to prevent Ukrainians from sharing video of Russian troops with Ukrainian soldiers, one expert said.
Russia experts said the escalating and increasingly overheated threats are typical of how the Russians engage diplomatically and are not a cause for worry.
It's not clear whether the seizure has anything to do with the IT Army's activities.
The contention follows multiple claims from Russian officials that a lack of U.S. cooperation was hurting their case.
Research published by a Ukrainian think tank shows a network of at least 88 local Telegram channels.
The operation is just one of many information operations multiple nations have conducted in relation to Russia's war in Ukraine.
Russia has hit Ukrainian satellite broadband services and Internet providers since the beginning of the war and recently began physically attacking Ukrainian Internet companies, according to the state information agency.
The British statement cites joint U.K./U.S. intelligence, representing the most formal U.S. attribution to date.
China's decade-old Mustang Panda hacking group is adjusting both its tactics and lures, researchers say.
U.S. Cyber Command's Gen. Paul Nakasone says Russian cyberattacks against Ukraine have been destructive and he is still bracing for potentially serious cyberattacks domestically.
The impact of the alleged attack is so far unclear. The country has taken in hundreds of thousands of Ukrainian refugees.
Multiple ongoing hacking efforts are either connected to or using the Russian military assault to target a wide range of entities.
Expect to see more attacks, Microsoft says.
The findings add detail to other suspected Chinese hacking campaigns in Europe related to the Russian invasion of Ukraine.
Flashpoint says international sanctions and a string of law enforcement actions are causing trouble for criminals to cash out.
Treasury: "By operating vast server farms that sell virtual currency mining capacity internationally, these companies help Russia monetize its natural resources."
Dragos says the group behind the tools has a "breadth of knowledge" that's "beyond" any previously witnessed.
Russian losses near Kyiv and a looming onslaught in eastern Ukraine may be a factor in the attack, a Ukrainian official said.
The incident also coincided with Finland openly weighing NATO membership and the Finns saying a Russian aircraft violated their airspace.
Strontium — a group linked to Russian military intelligence — was using the domains to target Ukrainian institutions, Microsoft said.
Ukraine's CERT attributed the phishing effort to a Russian state-backed group known as Armageddon or Gamaredon.
Researchers from SentinelOne say there are reasons to disagree with Viasat's most recent statement about the Feb. 24 attack.
The list also includes Evgeny Viktorovich Gladkikh, the researcher indicted for creating the malware, which targets industrial control systems.
The Threat Analysis Group report sheds light on international efforts to leverage the war in hacking campaigns.
New details suggest the incident was less complicated than initially thought, even as attacks continue.
The disruption targeted a large service provider in what might be the latest in a string of ongoing intentional internet disruptions.
Kaspersky is the first cybersecurity company and first Russian entity on the FCC's "Covered List," which so far has focused on China.
Donations of modems, routers and other equipment are flooding in from around the world.
The pledges follow the Biden administration saying that Russia's calculus on digital assaults had changed.
Russia has taken "preparatory actions" including probing websites for vulnerabilities, presidential adviser Anne Neuberger said.
A deepfake video of Ukrainian President Volodymyr Zelenskyy was quickly removed from Meta's platform, but experts called it worrisome nonetheless.
A Ukrainian official said an attack on Viasat Inc.’s KA-SAT satellite led to diminished communications leading up to the Russian invasion.
Ukraine's Victor Zhora said the so-called IT Army has done "useful" things, and he offered information about the "CaddyWiper" incident.
The Federal Office for Information Security, or BSI, did not accuse Kaspersky of any specific violations of customers' trust.
U.S. spy agencies have markedly improved their use of information warfare, the Senate Intelligence Committee chairman says.
Politically-motivated cybercrime groups pose a growing and significant risk to Western targets, researchers say.
Security experts worry that Russia is opening the door to mass surveillance and disinformation.
The scams have picked up on Telegram.
Treasury is reminding banks and other institutions of "red flags" as they handle cryptocurrency that could potentially be headed to Russia.
Polish, Ukrainian and European targets are facing a barrage of cyber operations, researchers say.
Ukraine's effort to force tech firms out of Russia is turning up mixed results so far.
Ukraine joins the vaunted cyberdefense organization in the midst of war.
There's money in the request for direct aid to Ukraine, but also things like more enforcement of U.S. sanctions.
The Treasury Department sanctioned 26 Russia- and Ukraine-based individuals and seven entities.
ICANN said it couldn't fulfill Ukraine's request to shut down Russian domains, and Russia has exerted pressure elsewhere.
A post by Russia's CERT points to internet activity that supposedly originated with U.S. government sites and domains in Western Europe.
Some believe Russia has already crossed the line on rules and norms governing behavior in cyberspace.
A phishing campaign aimed at countries taking refugees is potentially linked to a group known to researchers as TA445, UNC1151 or Ghostwriter.
The request to ICANN would have the effect of making Russian emails and websites unreachable from the outside and make it harder for Russians to reach the outside internet.
This is just the latest hacktivist activity related the intensifying Russian attack on Ukraine.
Policymakers have been applying pressure to social media giants to hold back the tide of disinformation.
Free upgrades and other services are on the table for organizations in Ukraine and elsewhere.
Russia — in its Soviet incarnation — was the source of Ukraine’s infrastructure. Postwar pipes for everything from water to telecommunications in Ukraine is Russian in origin.
The ransomware gang vowed to attack Russia's enemies.
U.S. companies are also advising Ukrainians to lock down their accounts.
The warnings come as the U.S. government considers a range of options to counter Russia's invasion of Ukraine.
The wiper could add to the woes of a country increasingly under physical and cyber assault.
The "large-scale modular malware framework" has largely replaced the "VPNFilter" tools that Sandworm used before they were disrupted in 2018.
It's the second major network disruption on Ukrainian government sites in about a week.
Anne Neuberger says the Biden administration has technical details linking the Russian spy agency to disruptions of Ukrainian banking and government websites.
The DDoS incidents involving Ukrainian government and bank websites also came as an unidentified group sent spam text messages falsely claiming ATMs didn't work.
Ukrainian officials said websites for the Ministry of Defense, Ministry of Internal Affairs and the Armed Forces of Ukraine were affected.
Amid questions about the most recent cyberattacks on Ukraine a known adversary has been observed launching its own attacks.
Cyberattacks against Ukraine continue, even as diplomats work to stave off physical war.
Symantec looks at how the spies use infected Microsoft Word attachments to implant backdoor files allowing for the delivery of more malware.
The hackers posted "proof" of their hacks, and researchers have started to dig in.
The attack is the latest salvo in cyber activity related to military tensions between Russia and Ukraine.
The NotPetya attacks crippled businesses around the world and led to an estimated $10 billion in costs.
To some, the president's words reflected dated and misguided thinking.
The website hacks come amid rising tensions between Russia and Ukraine over security issues.
One of the officials stands accused of collecting information about Ukraine's critical infrastructure, a frequent target of Russian cyberattacks.
Ukraine is more explicitly blaming Russia for the cyberattacks.
The White House needs to watch the growing cyber integration between Belarus and the Kremlin.
The advisory singled out critical infrastructure as being especially at risk.