Ukrainian Government

In a series of malicious cyber activities, Amin Timovich Stigal, allegedly part of Russia's GRU, executed wiper attacks on Ukrainian government networks. These attacks, made to resemble ransomware but with a destructive intent, resulted in loss of data and impeded governmental functions. With the WhisperGate malware, systems became inoperable, impacting government, non-profit, and IT sectors. The operation extended to defacing websites with threatening messages and unauthorized sales of stolen sensitive data, inducing widespread fear among Ukrainian citizens. Notably, personal health records were part of the exfiltrated information, compromising privacy on a large scale. The attacks not only disrupted Ukraine's digital infrastructure but also probed allied networks in NATO and the U.S., signifying a broader threat to international cybersecurity and stability.

Source: https://securityaffairs.com/164997/hacking/us-reward-russias-gru-hacker.html

TPRM report: https://scoringcyber.rankiteo.com/company/ukrainian-bridge

"id": "ukr1011070724",
"linkid": "ukrainian-bridge",
"type": "Cyber Attack",
"date": "6/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Public Sector',
                        'location': 'Ukraine',
                        'name': 'Ukrainian Government',
                        'type': 'Government'},
                       {'industry': 'Various',
                        'location': 'Ukraine',
                        'name': 'Non-Profit Organizations',
                        'type': 'Non-Profit'},
                       {'industry': 'Information Technology',
                        'location': 'Ukraine',
                        'name': 'IT Sector',
                        'type': 'Corporate'}],
 'attack_vector': ['WhisperGate Malware', 'Website Defacement'],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Health Records',
                                              'Sensitive Data']},
 'description': "Amin Timovich Stigal, allegedly part of Russia's GRU, "
                'executed wiper attacks on Ukrainian government networks. '
                'These attacks, made to resemble ransomware but with a '
                'destructive intent, resulted in loss of data and impeded '
                'governmental functions. With the WhisperGate malware, systems '
                'became inoperable, impacting government, non-profit, and IT '
                'sectors. The operation extended to defacing websites with '
                'threatening messages and unauthorized sales of stolen '
                'sensitive data, inducing widespread fear among Ukrainian '
                'citizens. Notably, personal health records were part of the '
                'exfiltrated information, compromising privacy on a large '
                "scale. The attacks not only disrupted Ukraine's digital "
                'infrastructure but also probed allied networks in NATO and '
                'the U.S., signifying a broader threat to international '
                'cybersecurity and stability.',
 'impact': {'data_compromised': ['Personal Health Records', 'Sensitive Data'],
            'operational_impact': 'Systems became inoperable',
            'systems_affected': ['Government Networks',
                                 'Non-Profit Sector',
                                 'IT Sector']},
 'initial_access_broker': {'data_sold_on_dark_web': True},
 'motivation': 'Destructive intent, inducing fear, and probing international '
               'networks',
 'threat_actor': 'Amin Timovich Stigal',
 'title': 'Wiper Attacks on Ukrainian Government Networks',
 'type': 'Wiper Attack'}