Ukrainian Hackers Take Down Service Provider for Russian Banks

Cyber Security Threat Summary:
“A group of Ukrainian hackers known as the Cyber.Anarchy.Squad claimed an attack that took down Russian telecom provider Infotel JSC on Thursday evening. Among other things, Moscow-based Infotel provides connectivity services between the Russian Central Bank and other Russian banks, online stores, and credit institutions. Following yesterday's attack, multiple major banks across Russia had their access cut off from the country's banking systems so that they can no longer make online payments, as Ukrainian news site Economichna Pravda first reported” (Bleeping Computer, 2023).

Infotel later confirmed the attack on its website, stating that some of its network equipment was damaged that it is currently working towards restoring the impacted systems.

Security Officer Comments:
According to Georgia Tech's Internet Outage Detection and Analysis (IODA), the attack took place on June 8, around 11 am. Since the attack, the Ukranian hackers have released screenshots as proof of accessing Infotel’s network, which includes a network diagram and a compromised email account.

This is not the first time that Cyber.Anarchy.Squad has targeted Russian companies. Since the beginning of the Russo-Ukraine war, the group has launched attacks against several entities in Russia as retaliation for the invasion. For instance, last year, the group breached the systems of a Russian retailer and jewelry manufacturer, leaking databases containing millions of records with information belonging to the companies' employees and customers, as well as internal company emails.

Link(s):
https://www.bleepingcomputer.com/