Reuters reported in an exclusive interview with the head of Ukraine's cyber intelligence that Russian hackers had infiltrated Ukraine's telecommunications system for at least seven months (since May). This has been described as a "major warning" for the West. According to Reuters, this hack was the largest since Russia's invasion of Ukraine, disrupting services provided by Ukraine's largest telecommunications operator for approximately 24 million users for several days starting from December 12. Ilya Vitiuk, head of cybersecurity at Ukraine's Security Service, told Reuters that this cyber attack caused "catastrophic" disruptions, aimed at delivering a psychological blow and gathering intelligence. He emphasized that "Kyivstar," a private and wealthy company, has made significant investments in cybersecurity, making this a major warning for all. He stated that the attack destroyed nearly "everything," including thousands of virtual servers and personal computers, marking it as the first instance of a destructive cyber attack that completely obliterated a telecommunications operator. He mentioned that hackers had accessed the telecommunications system since May and, according to assessments from Ukraine's cybersecurity service, they could steal personal information, track phone locations, intercept SMS messages, and infiltrate Telegram accounts. A spokesperson for "Kyivstar" told Reuters that the company is closely cooperating with Ukraine's cybersecurity service to investigate the aspects of this attack and will take all necessary measures to mitigate future cyber attack risks. "Kyivstar" is the largest telecommunications operator in Ukraine among three existing operators, serving about 1.1 million Ukrainians living in small towns and villages without access to other service providers. Following the cyber attack, people rushed to buy other SIM cards, creating long lines. The spokesperson stated that ATMs using "Kyivstar" SIM cards for internet access also malfunctioned, and the air raid sirens that sound during missile and drone attacks did not work properly in some areas. He noted that this attack had little effect on the Ukrainian army, as the military does not rely on telecommunications operators. The spokesperson expressed confidence that this attack was carried out by "Sandworm," a cyber warfare unit of the Russian military intelligence. Israel's National Cyber Directorate has issued a warning to be cautious of "update" emails from Iranian hackers.
Reuters: Russian Hackers Had Access to Ukraine's Telecommunications System for Months
Russian hackers infiltrated Ukraine's telecommunications system for months, causing significant disruptions and raising concerns about cybersecurity. This incident highlights vulnerabilities in critical infrastructure and serves as a warning for Western nations. The attack primarily targeted the largest telecom operator, Kyivstar, affecting millions of users.
👥 Key Players
📰 What Happened
Russian hackers infiltrated Ukraine's telecommunications system for at least seven months, causing significant disruptions to services for millions of users. This attack is noted as the largest since the invasion of Ukraine and has raised serious concerns about cybersecurity vulnerabilities.
- The cyber attack disrupted services for approximately 24 million users.
- It marked the first instance of a destructive cyber attack that completely obliterated a telecommunications operator.
💡 Why It Matters
📚 Background
Cyber warfare has become a central component of modern conflicts, with state actors increasingly targeting critical infrastructure to disrupt societies and gather intelligence.
🏷️ Entities Mentioned
Translated from the original and edited for English readers. View original source →
Translation confidence: 85%