Europe hit by Russian cyber-attack before Ukraine invasion

Image courtesy Foreign, Commonwealth & Development Office

Russia has been behind a series of cyber-attacks since the start of the renewed invasion of Ukraine, the EU, UK, US and other allies announced yesterday.

The most recent attack on communications company Viasat in Ukraine had a wider impact across the continent, disrupting wind farms and internet users in central Europe.

The UK’s National Cyber Security Centre (NCSC) assesses that the Russian Military Intelligence was almost certainly involved in the 13 January defacements of Ukrainian government websites and the deployment of Whispergate destructive malware. The NCSC also assesses that it is almost certain Russia was responsible for the subsequent cyber-attack impacting Viasat on 24th February.

On 24th February, a cyber-attack against Viasat began approximately one hour before Russia launched its major invasion of Ukraine. Although the primary target is believed to have been the Ukrainian military, other customers were affected, including personal and commercial internet users. Wind farms in central Europe and internet users were also affected.

Viasat has said that “tens of thousands of terminals have been damaged, made inoperable and cannot be repaired.”

Foreign Secretary Liz Truss said: "This is clear and shocking evidence of a deliberate and malicious attack by Russia against Ukraine which had significant consequences on ordinary people and businesses in Ukraine and across Europe.

"We will continue to call out Russia’s malign behaviour and unprovoked aggression across land, sea and cyberspace and ensure it faces severe consequences."

The announcement came as cyber security leaders from the 5 Eyes, EU and international allies met at the NCSC’s Cyber UK conference in Newport yesterday to discuss the cyber threats facing the world.