
The Security Service of Ukraine has established that the hacker group SandWorm, connected to the main intelligence department of the Russian General Staff, is behind the cyber attack on the national mobile communications operator “Kyivstar”.
The head of the Cyber Security Department of the Security Service of Ukraine, Ilya Vityuk, said that investigators and cyber experts are gathering evidence to hand over materials to the International Criminal Court in The Hague. He emphasized that cyber attacks on civilian infrastructure should be recognized as war crimes. During a full-scale war, the SBU blocks about 4,500 cyberattacks a year, in particular, protecting the information space of the Armed Forces of Ukraine and the Ministry of Defense.
The attack on “Kyivstar” turned out to be one of the many cyber threats that Ukraine faced in connection with the full-scale war. Known for its involvement in numerous cyber operations against Ukraine and other countries, SandWorm aims to destabilize and damage civilian infrastructure. SBU efforts are aimed not only at identifying and prosecuting specific perpetrators of attacks, but also at identifying and prosecuting their leaders, including Russia’s top military and secret service leadership.