Ukraine's Top Mobile Operator Hit By Biggest Cyber Attack of War So Far

According to Reuters, Ukraine's biggest mobile network was hit by 'what appeared to be the largest cyber attack of the war with Russia so far,' severing mobile and internet services for millions of people and knocking out the air raid alert system in parts of Kyiv. From the report: Kyivstar has 24.3 million mobile subscribers - more than half of Ukraine's population - as well as over 1.1 million home internet subscribers. Its CEO Oleksandr Komarov said the attack was 'a result of' the war with Russia, although he did not say which Russian body he believed to be responsible, and that the company's IT infrastructure had been 'partially destroyed.' '(The attack) significantly damaged (our) infrastructure, limited access, we could not counter it at the virtual level, so we shut down Kyivstar physically to limit the enemy's access,' Komarov said.

A source close to Ukraine's cyber defense also said that Russia was suspected to be the source of the attack, but no specific group had been identified. 'It's definitely a state actor,' said the source, who asked not to be identified because of the delicacy of the issue, adding that data cable interception showed 'a lot of Russian controlled traffic directed at these networks.' 'There's no ransom. It's all destruction. So it's not a financially motivated attack,' said the source. Ukrainian officials said that air raid alert systems in more than 75 settlements in the central Kyiv region were affected by the cyber attack.

Komarov said two databases containing customer data had been damaged and were currently locked. 'The most important thing is that the personal data of users has not been compromised,' Kyivstar said in its statement, promising to compensate customers for loss of access to services. Meanwhile, Ukraine's defense intelligence director (GUR) said it infected thousands of servers belonging to Russia's state tax service with malware, and destroyed databases and backups. 'According to GUR's statement published Tuesday, the attack led to the 'complete destruction' of the agency's infrastructure,' reports The Record. 'GUR claimed they destroyed configuration files 'which for years ensured the functioning of Russia's tax system.''

Read more of this story at Slashdot.