I’ve always wondered what would happen in the cyber world if war broke out. There has been many experts pointing out that physical war would include attack of an enemy’s technology through exploitation and denial of service. Well ladies and gentlemen, we are seeing that exact behavior as the Russia Ukraine war plays out.
We are seeing different large and small “hacking groups” take sides as well as identified government sponsored attacks. These groups are delivering DDoS attacks against web facing resources or exploitation and leaking of stolen data. The goal tends to be all about disruption of services.
The Hacker News posted details about how hacking groups are taking sides as well as what the cyber attack landscape looks like during this war. You can find the full article HERE.
Here is that article ….
Ukraine’s Computer Emergency Response Team (CERT-UA) has warned of Belarusian state-sponsored hackers targeting its military personnel and related individuals as part of a phishing campaign mounted amidst Russia’s military invasion of the country.
“Mass phishing emails have recently been observed targeting private ‘i.ua’ and ‘meta.ua’ accounts of Ukrainian military personnel and related individuals,” the CERT-UA said. “After the account is compromised, the attackers, by the IMAP protocol, get access to all the messages.”
Subsequently, the attacks leverage the contact information stored in the victim’s address book to propagate the phishing messages to other targets.
The Ukrainian government attributed the activities to a threat actor tracked as UNC1151, a Minsk-based group whose “members are officers of the Ministry of Defence of the Republic of Belarus.” In a follow-up update, the agency said the nation-state group also targets its own citizens, while simultaneously setting its sights on Russian entities –
- Association of Belarusians of the World (International Social Union)
- Belarusian Music Festival
- Samara Oblasna Public Organization “Russian-Belarusian Fraternity 2000”
- Dzêâslov, a Belarusian literary magazine
- Soviet Belarus (Sovetskaya Belorussiya), a daily newspaper in Belarus
- Employees of the National Academy of the Republic of Kazakhstan, and
- Voice of the Motherland, a local newspaper in Belarus
UNC1151 is the Mandiant-assigned moniker to an uncategorized threat cluster, which operates with objectives that are aligned with Belarusian government interests. The hacking group is believed to have been active since at least 2016.
read the rest including who is taking which sides at Russia-Ukraine War: Phishing, Malware and Hacker Groups Taking Sides (thehackernews.com)