麻豆影视

Skip to main content

A free-for-all but no crippling cyberattacks in Ukraine war

Share
RICHMOND, Va. -

Russia has some of the best hackers in the world, but in the early days of the war in Ukraine, its ability to create mayhem through malware hasn鈥檛 had much of a noticeable impact.

Instead, it鈥檚 Ukraine that鈥檚 marshalled sympathetic volunteer hackers in an unprecedented collective global effort to make the Kremlin pay for making war on its neighbor. It鈥檚 a kind of cyber free-for-all that experts say risks escalating a moment already fraught with extraordinary danger after Russian President Vladimir Putin put his nuclear forces on alert.

So far, Ukraine鈥檚 internet mostly works, its president still able to rally global support via a smartphone, and its power plants and other critical infrastructure still able to function. The kind of devastating cyberattacks thought likely to accompany a large-scale Russian military invasion haven鈥檛 happened.

鈥淚t has not played as large a component as some people thought it might and it definitely has not been seen outside of Ukraine to the extent that people feared,鈥 said Michael Daniel, a former White House cybersecurity coordinator. 鈥淥f course, that could still change.鈥

It鈥檚 not clear why Russia hasn鈥檛 landed a more powerful cyber punch. Russia might have determined that the impact wouldn鈥檛 be serious enough 鈥 Ukraine鈥檚 industrial base is far less digitized than in Western nations, for one. Or Russia might have determined that it couldn鈥檛 do serious harm to Ukraine without risking collateral impact outside its borders.

Many cybersecurity experts believe the Kremlin, at least for now, prefers to keep Ukraine鈥檚 communications open for the intelligence value.

Whatever the reasons, the conflict鈥檚 early days have been marked by lower-level cyberattacks that appear to be done both by freelancers and state actors.

Prior to the invasion, hackers knocked offline or defaced Ukrainian government websites. Now, an ad hoc army of hackers 鈥 some marshaled online by Ukraine鈥檚 SBU security service 鈥 are claiming credit for takedowns and defacements of Russian government and media sites.

A volunteer group calling itself the IT Army of Ukraine has more than 230,000 followers on a Telegram channel and is constantly listing targets for hackers to hit, like Russian banks and cryptocurrency exchanges.

On Monday, Ukraine鈥檚 SBU made its recruitment of allied volunteer hackers official.

鈥淐YBER FRONT IS NOW OPEN! Help Ukrainian cyber experts hack occupant鈥檚 platforms!鈥 it said on its Telegram channel, asking for tips on vulnerabilities in Russian cyber defenses, including software bugs and login credentials.

鈥淚t is the first time that states have openly called for citizens and volunteers to cyberattack another state,鈥 said Gabriella Coleman, a Harvard anthropology professor who has charted the rise of hacktivism.

The move mirrors Ukraine鈥檚 reliance on its citizens for other areas of defense.

鈥淚t shouldn鈥檛 be surprising that Ukraine is dipping into all possible resources to fight off the Russians, a much stronger foe. Just like civilians are coming out to fight in the street, it doesn鈥檛 surprise me that they are trying to call forward civilians to support this through the digital space,鈥 said Gary Corn, a retired Army colonel who served as general counsel to U.S. Cyber Command.

One hacker group that first appeared last year, the Belarus Cyber Partisans, claimed Monday to have disrupted some rail service in Belarus, the northern neighbor of Ukraine from which several prongs of Russia鈥檚 military attacked. The group has been trying to frustrate Russian troop and hardware movements through Belarus.

Sergey Voitekhovich, a former Belarusian railway worker who runs a rail-related Telegram group, told The Associated Press that the Cyber Partisans鈥 digital sabotage Sunday paralyzed train traffic in Belarus for 90 minutes. He said electronic ticket sales were still not functioning as of Monday evening.

The Cyber Partisans hack was intended to disrupt Russian troop movements in Belarus and was the second such action in a little over a month. Voitekhovich said the current attack delayed two Russian military trains bound for Belarus from the Russian city of Smolensk. His story could not be independently verified. Voitekhovich chatted with the AP from Poland. He said police pressure had forced him to leave Belarus.

Pro-Russian ransomware criminals from the Conti gang recently pledged on the group鈥檚 dark web site to 鈥渦se all our possible resources to strike back at the critical infrastructures of an enemy鈥 if Russia was attacked. Shortly afterward, sensitive chat logs that appear to belong to the gang were leaked online.

As partisans on both sides vow more serious cyberattacks, experts say there are real risks of the situation spiraling out of control.

鈥淒e-escalation and peace will be hard enough on their own without outsourced hacking to worry about,鈥 said Jay Healey, a cyberconflict expert at Columbia University who has long been opposed to letting the private sector 鈥渉ack back鈥 against Russian or other state-backed cyber aggression.

Making things more complicated: potential 鈥渇alse flag鈥 operations in which hackers pretend to be someone else when launching an attack, a specialty in cyber conflicts. Attribution in cyberattacks is almost always difficult and could be even more so in the fog of war.

There鈥檚 already been some spillover in some cyberattacks. Several hours before Russia鈥檚 invasion, destructive cyberattacks hit Ukraine鈥檚 digital infrastructure, damaging hundreds of computers with 鈥渨iper鈥 malware 鈥 including a financial institution and organizations with offices in neighboring Latvia and Lithuania, cybersecurity researchers said.

Microsoft President Brad Smith said in a statement Monday that such attacks on civilian targets 鈥渞aise serious concerns under the Geneva Convention.鈥

Smith noted that the cyberattacks 鈥 like a series of similar attacks in mid-January 鈥 鈥渉ave been precisely targeted, and we have not seen the use of the indiscriminate malware technology that spread across Ukraine鈥檚 economy and beyond its borders in the 2017 NotPetya attack,鈥 referring to a 鈥渨iper鈥 that caused more than $10 billion of damage globally by infecting companies that do business in Ukraine with malware seeded through a tax preparation software update.

The West blames Russia鈥檚 GRU military intelligence agency for that attack as well some of the other most damaging cyberattacks on record, including a pair in 2015 and 2016 that briefly knocked out parts of Ukraine鈥檚 power grid.

So far, there鈥檚 not been anything like that in this conflict. But officials say it could be coming.

鈥淚鈥檝e been pleasantly surprised so far ... that Russia has not launched more major cyberattacks against Ukraine,鈥 Senate Intelligence Committee Chairman Mark Warner said at an event Monday. 鈥淒o I expect Russia to up its game on cyber? Absolutely.鈥

___

Bajak reported from Boston. Associated Press writer Ben Fox contributed from Washington.

CTVNews.ca Top Stories

The British Columbia election campaign is set to officially start today, with Lt.-Gov. Janet Austin issuing the writ for the Oct. 19 vote.

A northern Ontario man is facing a $12,000 fine after illegally shooting a moose near the Batchawan River.

Unusual flippered feet are making their way into the Saint Lawrence River this weekend. Led by underwater explorer and filmmaker Nathalie Lasselin, volunteer divers are combing the riverbed near Beauharnois in Mont茅r茅gie to remove hundreds of tires that have been polluting the aquatic environment for decades.

A sea lion swam free after a rescue team disentangled it near Vancouver Island earlier this week.

Local Spotlight

Cole Haas is more than just an avid fan of the F.W. Johnson Wildcats football team. He's a fixture on the sidelines, a source of encouragement, and a beloved member of the team.

Getting a photograph of a rainbow? Common. Getting a photo of a lightning strike? Rare. Getting a photo of both at the same time? Extremely rare, but it happened to a Manitoba photographer this week.

An anonymous business owner paid off the mortgage for a New Brunswick not-for-profit.

They say a dog is a man鈥檚 best friend. In the case of Darren Cropper, from Bonfield, Ont., his three-year-old Siberian husky and golden retriever mix named Bear literally saved his life.

A growing group of brides and wedding photographers from across the province say they have been taken for tens of thousands of dollars by a Barrie, Ont. wedding photographer.

Paleontologists from the Royal B.C. Museum have uncovered "a trove of extraordinary fossils" high in the mountains of northern B.C., the museum announced Thursday.

The search for a missing ancient 28-year-old chocolate donkey ended with a tragic discovery Wednesday.

The Royal Canadian Mounted Police is celebrating an important milestone in the organization's history: 50 years since the first women joined the force.

It's been a whirlwind of joyful events for a northern Ontario couple who just welcomed a baby into their family and won the $70 million Lotto Max jackpot last month.