Espreso. Global

Cyberattack on Ukraine's telecom giant: Russian hackers have been in system at least since May 2023

4 January, 2024 Thursday
13:03

Russian hackers have been in the system of the Ukrainian telecoms giant Kyivstar since at least May last year, preparing for a large-scale cyberattack

client/title.list_title

Ilia Vitiuk, head of the Ukrainian Security Service’s (SBU) cybersecurity department told Reuters.

According to him, the attack caused catastrophic damage to the system and was intended to inflict a psychological blow and obtain intelligence.

"This attack is a big message, a big warning, not only to Ukraine, but for the whole Western world to understand that no one is actually untouchable," Vitiuk said.

He noted that Kyivstar has actually invested heavily in cybersecurity, but the attack destroyed "almost everything," including thousands of virtual servers and PCs, he said, describing it as probably the first example of a destructive cyberattack that completely destroyed the core of a telecom operator.

During the investigation, the SBU found that the hackers probably tried to infiltrate Kyivstar in March or earlier, Vitiuk said.

"For now, we can say securely that they were in the system at least since May 2023," he said.

The hackers probably gained full access in November.

According to the SBU, the hackers could have stolen personal information, located phones, intercepted SMS messages, and possibly hijacked Telegram accounts.

Vitiuk noted that the SBU helped Kyivstar restore its systems and repel new cyberattacks in a few days.

"After the major break there were a number of new attempts aimed at dealing more damage to the operator," he noted.

Vityuk said he was fairly certain that the attack was carried out by Sandworm, a cyberwarfare unit of Russia's military intelligence that has been linked to cyberattacks in Ukraine and other countries.

A year ago, Sandworm infiltrated the system of a Ukrainian telecommunications operator, but was detected by Kyiv because the SBU itself was in Russian systems, Vitiuk said, declining to name the company. The previous hack had not been reported before.

The SBU is still investigating how the hackers got into Kyivstar's system.

  • On the morning of December 12, 2023, Kyivstar users lost mobile communication due to a failure. The company said that the failure was caused by a powerful hacker attack. The SBU opened criminal proceedings under eight articles, including high treason and sabotage.
  • Russian hackers from the Solntsepek group claimed responsibility for the cyberattack on Kyivstar. They claimed to have stolen personal data of users.
  • Ukraine's Defense Ministry's Main Intelligence Directorate stated that the Russian cyberattack was aimed at civilians and had no impact on the Defense Forces.
  • On December 15, Kyivstar restored communication and mobile Internet.
Tags:
Read also:
  • News
2025, Wednesday
15 January
12:42
Exclusive
North Korea will refuse to acknowledge captured soldiers - human rights advocate
12:24
Exclusive
Russian forces take control of most apartment buildings in Ukraine's Toretsk
12:07
Ukraine must be part of any decision about its future - EU top diplomat
11:50
Review
Russia in flames: Ukrainian forces launch largest strike on Russian territory. Serhiy Zgurets' column
11:28
OPINION
Guarantees of Ukraine's disintegration: key takeaways from Lavrov's press conference
11:09
EU shipyards repair Russian Arctic gas tankers despite sanctions - media
10:51
Ukraine reports 170 clashes at front, repels 70 Russian attacks in Pokrovsk sector
10:30
Exclusive
Conscription age in Ukraine may be lowered if partners boost military aid - MP Kniazhytskyi
10:12
Drones target distillery near military training ground in Russia's Tambov region
09:54
Russia's massive missile attack targets critical infrastructure in western Ukraine
09:35
Russia loses 1,580 soldiers, nearly 400 pieces of equipment in one day of war in Ukraine
2025, Tuesday
14 January
21:40
Exclusive
Trump to nullify International Criminal Court warrant by meeting with Putin - expert
21:25
Zelenskyy releases video showing interrogation of captured North Korean soldier
21:10
South Korea ready to take DPRK soldiers captured by Ukraine
20:52
OPINION
Biden took the “safe route”
20:30
NATO starts Baltic Sentry mission, Tusk announces increased presence
20:07
46% of Ukrainians prioritize NATO membership over EU accession – KIIS survey
19:46
Exclusive
“Breaking new ground”: Defense Express on Ukraine’s largest strike on Russian military targets
19:25
Updated
Ukrainian Air Force technicians report mass transfers to infantry; General Staff responds
19:06
Volker expects “decisive approach” in Trump’s Ukraine policy
18:45
Depletion of Russian air defense exposes rear regions to strikes
18:24
Ukrainian exports entered 16 new markets in 2024
17:59
Slovak opposition to call no-confidence vote against Fico government over shift to Russia
17:38
Russia’s military aviation: What happens to 1,100 aircraft not in combat over Ukraine?
17:13
Ukraine may cease to exist in 2025, negotiations should be with U.S., says Putin's aide. Ukraine responds
16:52
Military exercises in Gomel District, Belarus, pose no threat to Ukraine – SBGS
16:34
Ukraine sets up 36 working groups to prepare for EU membership negotiations
16:14
Russian "court" sentences seven Ukrainian POWs involved in Kursk operation
16:03
Updated
Ukraine launches massive strike on Russian military targets, up to 1,100 km deep
15:57
Russian agents exploit families of Ukrainian POWs for sabotage
15:37
Exclusive
'Trump is unpredictable but farsighted': VOA's Myroslava Gongadze on Greenland controversy
15:16
Russian oil tankers stalled as U.S. sanctions bite
14:52
Ukraine's largest long-range strike to date hits key Russian military and industrial sites
14:38
Ukraine exports almost $25 billion worth of goods to EU in 2024
14:17
OPINION
Mobilization of 18-year-olds: the West's excuses for its own failures
13:50
Exclusive
From Bryansk to Kazan: Ukraine targets Russian defense industry with precision strikes
13:31
OPINION
Biden in his last presidency days finishes off Russian economy
13:03
Review
Ukraine receives world's most advanced self-propelled gun from Germany: Column by Serhiy Zgurets
12:42
Exclusive
Challenges in Kursk region now are future challenges for Seoul – military expert Selezniov
12:23
OPINION
Fico, Szijjártó, and Orbán use "gas" statements to portray Ukraine as unreliable. Vitaly Portnikov column
More news