Ukraine: Russia-Belarus behind recent cyber attack

A Ukrainian investigation has concluded that “all the evidence” shows that Russia was behind a cyber attack last week that shut down several government websites, according to Bloomberg.

The attacks were aimed at “destabilizing” the situation in Ukraine, according to the findings of a joint survey of several Ukrainian state agencies published today.

The former Soviet nation suffered a massive cyber attack on many of its ministries and public services on Friday.

Russia has already denied allegations that it was behind the hack.
Several Ukrainian agencies are conducting their own analyzes and another official, citing other findings, had earlier pointed the finger at Belarus.

Preliminary findings suggest that a group of hackers known as UNC1151 from Belarus, a close Russian ally, may have led the operation, said in a text message Serhiy Demedyuk, deputy head of Ukraine’s National Security and Defense Council.

UNC1151 is a cyber-espionage group linked to Belarus’ security service, Demedyuk said.

The group uses a tactic known as “collecting credentials” or gaining unauthorized access to mail accounts, followed by the spread of malware, he said.

According to Demedyuk, the hacking team operates in Lithuania, Latvia, Poland and Ukraine and often uses a narrative that mocks NATO’s presence in Northern Europe. The Belarusian government has not responded to Ukraine’s allegations.

Tensions in the region have escalated in recent weeks as Russia continues to deploy troops near its border with Ukraine, a move that could prepare for a full-scale invasion, according to Ukraine’s western partners.

Russia says it wants NATO to ban Ukraine and other former Soviet states from returning to power in 1997.