Wednesday, June 19, 2024

Hackers Compromised the Russian Defense Satellite Communications Provider

According to a report from the Telegram channel, Dozor, a Russian telecommunications company that offers services to power grids, oil fields, the Russian military, and the Federal Security Service (FSB), has been hacked.

The post that the unknown threat actors posted on the telegram group translated that they had taken down satellite terminals, rebooted switches, and the data on these servers were destroyed in the attack conducted by the threat actors.

Wagner Group Behind the Attack

Wagner is a Russian mercenary group founded and led by Yevgeny Prigozhin. The group made headlines when they marched toward Moscow after Prigozhin got into issues with the Russian Government.

The group also releases ransomware that doesn’t ask for money but encourages users to join PMC Wagner.

It appears that the same hacker group responsible for the Dozor hack also defaced several unrelated websites, leaving a message in support of the Wagner group.

According to Doug Madory, the person in charge of internet analysis at Kentik (a network monitoring company), Dozor-Teleport has been disconnected from the internet and is presently inaccessible.

As per the IODA project that monitors internet outages globally, the network has been offline since Wednesday at 10 p.m. EST.

Netblocks also confirmed the outage.

The attackers also warned that more threatening activities were to come.

Image: Defaced Website

The defaced website states, “We agreed to a peaceful solution because we achieved the main thing — we showed our capabilities and full social approval of our actions. But what do we see instead? The current military leadership has not been removed from office, and criminal cases have not been closed … You kicked us out of the NWO zone, out of Russia, but you can’t kick us out of the network. We take responsibility for the hacking. This is just the beginning, more to come.

FSB, Dozor and the ZIP file

Furthermore, the group posted a .zip file that contained 674 files of PDFs, images, and documents relating to the connections between the FSB and the Dozor.

To prove the authenticity of the attack, the group also posted the passwords that Dozor employees used for verifying with the FSB representatives, which changes every two months in 2023.

As per reports, Dozor’s internet connection went down at 2 UTC on Wednesday and still remains unreachable.

After this, the company switched to Amtel-Svyaz, the Moscow-based parent company of Dozor.

Cyber policy expert and Consultant. Oleg Shakirov mentioned that there is some suspicion against Wagner’s involvement in this as there is no history of such attacks with the Wagner group.

“AI-based email security measures Protect your business From Email Threats!” – .


Latest articles

Amtrak Data Breach: Hackers Accessed User’s Email Address

Amtrak notified its customers regarding a significant security breach involving its Amtrak Guest Rewards...

Chrome Security Update – Patch for 6 Vulnerabilities

Google has announced a new update for the Chrome browser, rolling out version 126.0.6478.114/115...

Hackers Weaponize Windows Installer (MSI) Files to Deliver Malware

Cybersecurity researchers have uncovered a sophisticated malware campaign orchestrated by a threat actor group,...

Hackers Using VPNs To Exploit Restrictions & Steal Mobile Data

Hackers are offering "free" mobile data access on Telegram channels by exploiting loopholes in...

New PhaaS Platform Lets Attackers Bypass Two-Factor Authentication

Several phishing campaign kits have been used widely by threat actors in the past....

Stuxnet, The Malware That Propagates To Air-Gapped Networks

Stuxnet, a complex worm discovered in 2010, targeted Supervisory Control and Data Acquisition (SCADA)...

Threat Actors Claiming Breach of AMD Source Code on Hacking Forums

A threat actor named " IntelBroker " claims to have breached AMD in June...
Eswar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Free Webinar

API Vulnerability Scanning

71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning..
Key takeaways include:

  • Scan API endpoints for OWASP API Top 10 vulnerabilities
  • Perform API penetration testing for business logic vulnerabilities
  • Prioritize the most critical vulnerabilities with AcuRisQ
  • Workflow automation for this entire process

Related Articles