Ukraine exposes expansive Russian hacking operation targeting its government, infrastructure

Written by
Nov 4, 2021 | CYBERSCOOP

Ukraine’s top law enforcement agency published a detailed analysis Thursday outing what it says are Russian hackers and “traitors who sided with the enemy” behind a sweeping campaign that began in 2014.

The hackers, according to the Security Service of Ukraine, are responsible for more than 5,000 cyberattacks on Ukrainian state entities and critical infrastructure that attempted to “infect” more than 1,500 government computer systems.

The report says the Russian intelligence agency the Federal Security Service (FSB) is behind the “Armageddon” group, known more broadly outside Ukrainian borders as Gamaredon or Primitive Bear.

It’s distinct from other Russian intelligence and military hacking groups behind attacks on targets around the world, including the infamous hacks of the Democratic National Committee and Hillary Clinton’s campaign ahead of the 2016 elections. Armageddon dates back to 2013 or 2014, the Ukrainian report says, making it “relatively young,” but nevertheless worthy of attention and “able to turn into a cyberthreat with consequences, the scale of which will exceed the negative effect” of the other Russian government hacking groups.

While the Gamaredon hacking outfit has demonstrated global reach, it has repeatedly returned to its former Soviet

Read More: