4 ms·

Ukrainian government websites hit by a major cyberattack

10 points by app4soft 5y ago

app4soft 5y ago
Olga Tokaruk[0] tweeted 2 hours ago: > Breaking: > Ukrainian government websites hit by a major cyberattack this morning. Below is the screenshot from Foreign ministry website. It says in Ukrainian, Russian and Polish: 'Ukrainian, be afraid and prepare for the worst. All your personal data has been uploaded to the web'[1] > The websites of the Cabinet of ministers, foreign ministry, education ministry, ministry of agriculture, energy and sports ministries have been hit, as well as that of the state emergency service. Diia portal, which stores personal data of millions of Ukrainians, is unavailable[2] > Correction: Diia portal doesn't store personal data. It's a website providing e-services to the citizens. Personal data is stored in secure registries.[3] According article[4] posted by Taras Mishchenko[5], CEO & Chief Editor of the Mezha.Media[6], there is still "NO any response from officials". UPDATE: Oleg Nikolenko, Spokesperson for MFA Ukraine, later tweeted: > As a result of a massive cyber attack, the websites of the Ministry of Foreign Affairs and a number of other government agencies are temporarily down. Our specialists have already started restoring the work of IT systems, and the cyberpolice has opened an investigation.[7] In same time MFA Ukraine just tweeted attention message: > At this moment MFA Facebook and Twitter pages can be used to get official information from the ministry:[8] > https://www.facebook.com/UkraineMFA https://www.facebook.com/UkraineMFA > https://twitter.com/MFA_Ukraine https://twitter.com/MFA_Ukraine > To contact MFA on consular issues: +38 (044) 238-16-57 > Contacts of embassies can be found at their social media pages On attached image to MFA Ukraine's tweet there is text message: > The website of MFA is temporarily down[img] [0] https://twitter.com/olgatokariuk https://twitter.com/olgatokariuk [1] https://twitter.com/olgatokariuk/status/1481860141888806913 https://twitter.com/olgatokariuk/status/1481860141888806913 [2] https://twitter.com/olgatokariuk/status/1481879169231429635 https://twitter.com/olgatokariuk/status/1481879169231429635 [3] https://twitter.com/olgatokariuk/status/1481888655249653760 https://twitter.com/olgatokariuk/status/1481888655249653760 [4] https://mezha.media/2022/01/14/khakery-zlamaly-sayt-mzs-atakuvaly-diia-ta-riad-uriadovykh-portaliv/ https://mezha.media/2022/01/14/khakery-zlamaly-sayt-mzs-atak... [5] https://twitter.com/tarasmi/status/1481867301951574017 https://twitter.com/tarasmi/status/1481867301951574017 [6] https://twitter.com/MezhaMedia/status/1481867070518267904 https://twitter.com/MezhaMedia/status/1481867070518267904 [7] https://twitter.com/OlegNikolenko_/status/1481880668195983362 https://twitter.com/OlegNikolenko_/status/148188066819598336... [8] https://twitter.com/MFA_Ukraine/status/1481899467196534788 https://twitter.com/MFA_Ukraine/status/1481899467196534788 [img] https://pbs.twimg.com/media/FJDDqfyXsAILVrw?format=jpg&name=orig https://pbs.twimg.com/media/FJDDqfyXsAILVrw?format=jpg&name=...
- app4soft 5y ago
  UPDATE2: Oleg Nikolenko, Spokesperson for MFA Ukraine, just tweeted more info: > Investigation is still ongoing but the Security Service of Ukraine has obtained preliminary indicators suggesting that hacker groups associated with the Russian secret services may stand behind today’s massive cyberattack on government websites[9] Tweet includes link to the latest article[10] published by the Security Service of Ukraine. [9] https://twitter.com/OlegNikolenko_/status/1482085193599041538 https://twitter.com/OlegNikolenko_/status/148208519359904153... [10] https://ssu.gov.ua/novyny/sbu-rozsliduie-prychetnist-rosiiskykh-spetssluzhb-do-sohodnishnoi-kiberataky-na-orhany-derzhavnoi-vlady-ukrainy https://ssu.gov.ua/novyny/sbu-rozsliduie-prychetnist-rosiisk... (in Ukrainian)
  - app4soft 5y ago
    UPDATE3: Euromaidan Press news media just tweeted: > The deface image left on Ukraine govt sites on Jan14 had an anti-Ukrainian text in UA, RU, PL. We used Google Translate and its RU clone, Yandex Translate, to machine-translate the text's each version into two other languages, which showed that hackers had used Yandex[0] Tweet also includes link to full story (updated) article by Euromaidan Press.[1] N.B. Yandex firm is registered in Schiphol, the Netherlands as a naamloze vennootschap (Dutch public limited company), but the company founders and most of the team members are located in Russia.[2] On June 1, 2017, Yandex closed its offices in Kyiv and Odessa, Ukraine after the Security Service of Ukraine raided the offices and accused the company of illegally collecting Ukrainian users’ data and sending it to Russian security agencies. The firm denied any wrongdoing, but in May 2017, all Yandex services were banned in Ukraine by Presidential Decree No. 133/2017.[3] [0] https://twitter.com/EuromaidanPress/status/1482312998509330435 https://twitter.com/EuromaidanPress/status/14823129985093304... [1] https://euromaidanpress.com/2022/01/14/ukraine-under-massive-cyberattack-with-a-russian-trace/ https://euromaidanpress.com/2022/01/14/ukraine-under-massive... [2] https://en.wikipedia.org/wiki/Yandex https://en.wikipedia.org/wiki/Yandex [3] https://en.wikipedia.org/wiki/Yandex#Security https://en.wikipedia.org/wiki/Yandex#Security
    - app4soft 5y ago
      UPDATE4: On January 16, 2022 AP News published article “Microsoft discloses malware attack on Ukraine govt networks”.[0] Olga Tokariuk just tweeted a quote from this article: > Demedyuk told Reuters in written comments that the defacement “was just a cover for more destructive actions that were taking place behind the scenes and the consequences of which we will feel in the near future.”[1] [0] https://apnews.com/article/technology-business-europe-russia-ukraine-404c5e751709fba66b31fd512f734d80 https://apnews.com/article/technology-business-europe-russia... [1] https://twitter.com/olgatokariuk/status/1482684947555094532 https://twitter.com/olgatokariuk/status/1482684947555094532

10 points by app4soft 5y ago

Olga Tokaruk[0] tweeted 2 hours ago: > Breaking: > Ukrainian government websites hit by a major cyberattack this morning. Below is the screenshot from Foreign ministry website. It says in Ukrainian, Russian and Polish: 'Ukrainian, be afraid and prepare for the worst. All your personal data has been uploaded to the web'[1] > The websites of the Cabinet of ministers, foreign ministry, education ministry, ministry of agriculture, energy and sports ministries have been hit, as well as that of the state emergency service. Diia portal, which stores personal data of millions of Ukrainians, is unavailable[2] > Correction: Diia portal doesn't store personal data. It's a website providing e-services to the citizens. Personal data is stored in secure registries.[3] According article[4] posted by Taras Mishchenko[5], CEO & Chief Editor of the Mezha.Media[6], there is still "NO any response from officials". UPDATE: Oleg Nikolenko, Spokesperson for MFA Ukraine, later tweeted: > As a result of a massive cyber attack, the websites of the Ministry of Foreign Affairs and a number of other government agencies are temporarily down. Our specialists have already started restoring the work of IT systems, and the cyberpolice has opened an investigation.[7] In same time MFA Ukraine just tweeted attention message: > At this moment MFA Facebook and Twitter pages can be used to get official information from the ministry:[8] > https://www.facebook.com/UkraineMFA https://www.facebook.com/UkraineMFA > https://twitter.com/MFA_Ukraine https://twitter.com/MFA_Ukraine > To contact MFA on consular issues: +38 (044) 238-16-57 > Contacts of embassies can be found at their social media pages On attached image to MFA Ukraine's tweet there is text message: > The website of MFA is temporarily down[img] [0] https://twitter.com/olgatokariuk https://twitter.com/olgatokariuk [1] https://twitter.com/olgatokariuk/status/1481860141888806913 https://twitter.com/olgatokariuk/status/1481860141888806913 [2] https://twitter.com/olgatokariuk/status/1481879169231429635 https://twitter.com/olgatokariuk/status/1481879169231429635 [3] https://twitter.com/olgatokariuk/status/1481888655249653760 https://twitter.com/olgatokariuk/status/1481888655249653760 [4] https://mezha.media/2022/01/14/khakery-zlamaly-sayt-mzs-atakuvaly-diia-ta-riad-uriadovykh-portaliv/ https://mezha.media/2022/01/14/khakery-zlamaly-sayt-mzs-atak... [5] https://twitter.com/tarasmi/status/1481867301951574017 https://twitter.com/tarasmi/status/1481867301951574017 [6] https://twitter.com/MezhaMedia/status/1481867070518267904 https://twitter.com/MezhaMedia/status/1481867070518267904 [7] https://twitter.com/OlegNikolenko_/status/1481880668195983362 https://twitter.com/OlegNikolenko_/status/148188066819598336... [8] https://twitter.com/MFA_Ukraine/status/1481899467196534788 https://twitter.com/MFA_Ukraine/status/1481899467196534788 [img] https://pbs.twimg.com/media/FJDDqfyXsAILVrw?format=jpg&name=orig https://pbs.twimg.com/media/FJDDqfyXsAILVrw?format=jpg&name=...

app4soft 5y ago
UPDATE2: Oleg Nikolenko, Spokesperson for MFA Ukraine, just tweeted more info: > Investigation is still ongoing but the Security Service of Ukraine has obtained preliminary indicators suggesting that hacker groups associated with the Russian secret services may stand behind today’s massive cyberattack on government websites[9] Tweet includes link to the latest article[10] published by the Security Service of Ukraine. [9] https://twitter.com/OlegNikolenko_/status/1482085193599041538 https://twitter.com/OlegNikolenko_/status/148208519359904153... [10] https://ssu.gov.ua/novyny/sbu-rozsliduie-prychetnist-rosiiskykh-spetssluzhb-do-sohodnishnoi-kiberataky-na-orhany-derzhavnoi-vlady-ukrainy https://ssu.gov.ua/novyny/sbu-rozsliduie-prychetnist-rosiisk... (in Ukrainian)
- app4soft 5y ago
  UPDATE3: Euromaidan Press news media just tweeted: > The deface image left on Ukraine govt sites on Jan14 had an anti-Ukrainian text in UA, RU, PL. We used Google Translate and its RU clone, Yandex Translate, to machine-translate the text's each version into two other languages, which showed that hackers had used Yandex[0] Tweet also includes link to full story (updated) article by Euromaidan Press.[1] N.B. Yandex firm is registered in Schiphol, the Netherlands as a naamloze vennootschap (Dutch public limited company), but the company founders and most of the team members are located in Russia.[2] On June 1, 2017, Yandex closed its offices in Kyiv and Odessa, Ukraine after the Security Service of Ukraine raided the offices and accused the company of illegally collecting Ukrainian users’ data and sending it to Russian security agencies. The firm denied any wrongdoing, but in May 2017, all Yandex services were banned in Ukraine by Presidential Decree No. 133/2017.[3] [0] https://twitter.com/EuromaidanPress/status/1482312998509330435 https://twitter.com/EuromaidanPress/status/14823129985093304... [1] https://euromaidanpress.com/2022/01/14/ukraine-under-massive-cyberattack-with-a-russian-trace/ https://euromaidanpress.com/2022/01/14/ukraine-under-massive... [2] https://en.wikipedia.org/wiki/Yandex https://en.wikipedia.org/wiki/Yandex [3] https://en.wikipedia.org/wiki/Yandex#Security https://en.wikipedia.org/wiki/Yandex#Security
  - app4soft 5y ago
    UPDATE4: On January 16, 2022 AP News published article “Microsoft discloses malware attack on Ukraine govt networks”.[0] Olga Tokariuk just tweeted a quote from this article: > Demedyuk told Reuters in written comments that the defacement “was just a cover for more destructive actions that were taking place behind the scenes and the consequences of which we will feel in the near future.”[1] [0] https://apnews.com/article/technology-business-europe-russia-ukraine-404c5e751709fba66b31fd512f734d80 https://apnews.com/article/technology-business-europe-russia... [1] https://twitter.com/olgatokariuk/status/1482684947555094532 https://twitter.com/olgatokariuk/status/1482684947555094532