UK exposes a Russian cyber campaign targeting organizations delivering aid to Ukraine. The NCSC, with allies, reveals GRU unit's hacking activities.
The UK's National Cyber Security Centre (NCSC), working with allies, has uncovered a significant cyber campaign orchestrated by Russia. This campaign targets organizations providing crucial foreign assistance to Ukraine.
Since 2022, the GRU Unit 26165, also known as Fancy Bear, has been actively employing various hacking techniques to infiltrate both public and private entities. These include organizations involved in defense, IT services, and logistical support.
Russian spies utilized a combination of methods to gain unauthorized network access. This included accessing approximately 10,000 internet-connected cameras, some positioned at Ukrainian borders to monitor aid shipments and rail stations. The actors even exploited legitimate municipal services like traffic cams.
Paul Chichester, NCSC Director of Operations, emphasized the seriousness of this campaign, urging targeted organizations to take preventative measures and apply the mitigation advice.
This malicious campaign presents a serious risk to organizations involved in delivering assistance to Ukraine.