|
added Category:Russian–Ukrainian cyberwarfare using HotCat
|
mNo edit summary
|
||
| (33 intermediate revisions by 24 users not shown) | |||
| Line 1: | Line 1: | ||
| ⚫ | {{Short description|Ukrainian cyberwarfare volunteer group}} |
||
{{Use dmy dates|date=February 2022}} |
{{Use dmy dates|date=February 2022}} |
||
| ⚫ | |||
{{Infobox military unit |
{{Infobox military unit |
||
| image = IT Army of Ukraine badge.svg |
|||
| unit_name = IT Army of Ukraine |
| unit_name = IT Army of Ukraine |
||
| native_name = IT-армія України |
| native_name = IT-армія України |
||
| dates = 26 February |
| dates = 26 February 2022 – present<ref name="Reuters Article 1">{{cite news |last1=Schectman |first1=Joel |last2=Bing |first2=Christopher |title=EXCLUSIVE Ukraine calls on hacker underground to defend against Russia |url=https://www.reuters.com/world/exclusive-ukraine-calls-hacker-underground-defend-against-russia-2022-02-24/ |access-date=3 March 2022 |work=[[Reuters]] |date=25 February 2022}}</ref> |
||
| country = |
| country = Ukraine |
||
| branch = [[Cyberwarfare]] |
| branch = [[Cyberwarfare]] |
||
| size = ~1000 Ukrainian and foreign volunteers |
| size = ~1000 Ukrainian and foreign volunteers {{as of|2022|3|3|lc=y}}<ref name="Reuters report 2">{{cite news |last1=Schectman |first1=Joel |last2=Bing |first2=Christopher |last3=Pearson |first3=James |title=Ukrainian cyber resistance group targets Russian power grid, railways |url=https://www.reuters.com/technology/ukrainian-cyber-resistance-group-targets-russian-power-grid-railways-2022-03-01/ |access-date=3 March 2022 |date=2 March 2022}}</ref> |
||
|website=[https://itarmy.com.ua/?lang=en itarmy.com.ua] |
| website = [https://itarmy.com.ua/?lang=en itarmy.com.ua] |
||
}} |
}} |
||
The '''IT Army of Ukraine''' ({{lang-uk|IT-армія України}}) is a volunteer [[cyberwarfare]] organisation created at the end of February 2022 to fight against digital intrusion of Ukrainian information and cyberspace after the beginning of the [[2022 Russian invasion of Ukraine|Russian invasion of Ukraine]] on February 24, 2022.<ref name="Reuters Article 1" /><ref>{{cite news |last1=Todd |first1=Drew |title=Anonymous Hacking Group Targets Russian Government |url=https://www.secureworld.io/industry-news/anonymous-hacktivists-target-russia |access-date=3 March 2022 |date=25 February 2022}}</ref> The group also conducts offensive cyberwarfare operations, and Chief of Head of [[State Special Communications Service of Ukraine]] [[Victor Zhora]] said its enlisted hackers would only attack military targets.<ref>{{cite web|url=https://www.independent.co.uk/news/ukraine-russia-kremlin-boston-hackers-b2028853.html |title=Ukraine cyber official: We only attack military targets |work=The Independent |date= 4 March 2022|accessdate=2022-03-16}}</ref> |
The '''IT Army of Ukraine''' ({{lang-uk|IT-армія України}}) is a volunteer [[cyberwarfare]] organisation created at the end of February 2022 to fight against digital intrusion of Ukrainian information and cyberspace after the beginning of the [[2022 Russian invasion of Ukraine|Russian invasion of Ukraine]] on February 24, 2022.<ref name="Reuters Article 1" /><ref>{{cite news |last1=Todd |first1=Drew |title=Anonymous Hacking Group Targets Russian Government |url=https://www.secureworld.io/industry-news/anonymous-hacktivists-target-russia |access-date=3 March 2022 |date=25 February 2022}}</ref> The group also conducts [[Russo-Ukrainian cyberwarfare|offensive cyberwarfare operations]], and Chief of Head of [[State Special Communications Service of Ukraine]] [[Victor Zhora]] said its enlisted hackers would only attack military targets.<ref>{{cite web|url=https://www.independent.co.uk/news/ukraine-russia-kremlin-boston-hackers-b2028853.html |title=Ukraine cyber official: We only attack military targets |work=The Independent |date= 4 March 2022|accessdate=2022-03-16}}</ref> |
||
== Formation == |
== Formation == |
||
On 26 February 2022, the [[Ministry of Digital Transformation|Minister of Digital Transformation]] and [[First Vice Prime Minister of Ukraine]], [[Mykhailo Fedorov]] announced the creation of the IT Army, which is mainly |
On 26 February 2022, the [[Ministry of Digital Transformation (Ukraine)|Minister of Digital Transformation]] and [[First Vice Prime Minister of Ukraine]], [[Mykhailo Fedorov]] announced the creation of the IT Army, which is mainly coordinating its efforts via Telegram and [[Twitter]].<ref name="Reuters Article 3">{{cite news |last1=Pearson |first1=James |title=Ukraine launches 'IT army,' takes aim at Russian cyberspace |url=https://www.reuters.com/world/europe/ukraine-launches-it-army-takes-aim-russian-cyberspace-2022-02-26/ |access-date=3 March 2022 |work=[[Reuters]] |date=27 February 2022}}</ref><ref>{{Cite web |title=Anonymous and IT Army shut down more than 2,400 Russian websites |url=https://www.fonetech.cz/hra-kocky-s-mysi-anonymous-a-it-army-sestrelili-vice-nez-2-400-ruskych-webu/ |website=Fonetech|date=13 September 2022 }}</ref> |
||
According to [[Reuters]], the Ukrainian government asked for volunteers from the country's hacker underground to help protect critical infrastructure and conduct cyber spying missions against [[Russian Armed Forces|Russian troops]]. [[Yegor Aushev]], the co-founder of a Ukrainian [[cybersecurity]] firm [[Hacken.io|Hacken]],<ref>{{Cite web |date=2022-03-10 |title=Kyiv's hackers seize their wartime moment |url=https://www.politico.eu/article/kyiv-cyber-firm-state-backed-hacking-group/ |access-date=2022-07-12 |website=POLITICO |language=en-US}}</ref> wrote, "Ukrainian cybercommunity! It's time to get involved in the cyber defense of our country," asking hackers and cybersecurity experts to submit an application listing their specialties, such as malware development and professional references.<ref>{{Cite web |date=2022-02-25 |title=Russia partially restricts access to Facebook to 'protect Russian media' |url=https://www.theguardian.com/world/2022/feb/24/ukraine-hackers-defend-against-russia |access-date=2022-07-12 |website=the Guardian |language=en}}</ref> |
According to [[Reuters]], the Ukrainian government asked for volunteers from the country's hacker underground to help protect critical infrastructure and conduct cyber spying missions against [[Russian Armed Forces|Russian troops]]. [[Yegor Aushev]], the co-founder of a Ukrainian [[cybersecurity]] firm [[Hacken.io|Hacken]],<ref>{{Cite web |date=2022-03-10 |title=Kyiv's hackers seize their wartime moment |url=https://www.politico.eu/article/kyiv-cyber-firm-state-backed-hacking-group/ |access-date=2022-07-12 |website=POLITICO |language=en-US}}</ref> wrote, "Ukrainian cybercommunity! It's time to get involved in the cyber defense of our country," asking hackers and cybersecurity experts to submit an application listing their specialties, such as malware development and professional references.<ref>{{Cite web |date=2022-02-25 |title=Russia partially restricts access to Facebook to 'protect Russian media' |url=https://www.theguardian.com/world/2022/feb/24/ukraine-hackers-defend-against-russia |access-date=2022-07-12 |website=the Guardian |language=en}}</ref> |
||
| Line 21: | Line 22: | ||
The volunteers who joined the group are divided into offensive and defensive cyber units. While the offensive volunteer unit would help Ukraine's military conduct digital espionage operations against invading [[Russian Armed Forces|Russian forces]], the defensive unit would be employed to defend infrastructure such as power plants and water systems.<ref name="Reuters Article 1" /> |
The volunteers who joined the group are divided into offensive and defensive cyber units. While the offensive volunteer unit would help Ukraine's military conduct digital espionage operations against invading [[Russian Armed Forces|Russian forces]], the defensive unit would be employed to defend infrastructure such as power plants and water systems.<ref name="Reuters Article 1" /> |
||
The Ukrainian government used [[Twitter]] and [[Telegram (software)|Telegram]] to share a list of Russian and Belarusian targets for the army to attack.<ref>{{cite news |url=https://www.washingtonpost.com/politics/2022/03/07/putins-invasion-ukraine-didnt-rely-cyber-warfare-heres-why/ |title=Is a Russian cyberwar coming? |newspaper=[[The Washington Post]] |date=2022-03-07 |access-date=2022-03-16}}</ref> Russian ransomware operators responded by offering their assistance to counter the Ukrainian effort.<ref>{{Cite web|url=https://www.politico.com/news/2022/02/25/russian-ransomware-gang-threatens-countries-ukraine-00011896|title = Russian ransomware gang threatens countries that punish Moscow for Ukraine invasion|website = [[Politico]]}}</ref> |
The Ukrainian government used [[Twitter]] and [[Telegram (software)|Telegram]] to share a list of Russian and Belarusian targets for the army to attack.<ref>{{cite news |url=https://www.washingtonpost.com/politics/2022/03/07/putins-invasion-ukraine-didnt-rely-cyber-warfare-heres-why/ |title=Is a Russian cyberwar coming? |newspaper=[[The Washington Post]] |date=2022-03-07 |access-date=2022-03-16}}</ref> Russian ransomware operators responded by offering their assistance to counter the Ukrainian effort.<ref>{{Cite web|url=https://www.politico.com/news/2022/02/25/russian-ransomware-gang-threatens-countries-ukraine-00011896|title = Russian ransomware gang threatens countries that punish Moscow for Ukraine invasion|website = [[Politico]]| date=25 February 2022 }}</ref> |
||
== Activities == |
== Activities == |
||
* Fedorov requested the assistance of cyber specialists and tweeted a Telegram with a list of 31 websites of Russian business and state organizations.<ref>{{cite web |url=https://t.me/s/itarmyofukraine2022 |title="IT army of Ukraine 2022"|website=Telegram |access-date=3 March 2022}}</ref><ref name="List of downed sites" /><ref name="Reuters Article 3" /> |
* Fedorov requested the assistance of cyber specialists and tweeted a Telegram with a list of 31 websites of Russian business and state organizations.<ref>{{cite web |url=https://t.me/s/itarmyofukraine2022 |title="IT army of Ukraine 2022"|website=Telegram |access-date=3 March 2022}}</ref><ref name="List of downed sites" /><ref name="Reuters Article 3" /> |
||
* On 28 February 2022, the IT Army hacked the website of the [[Moscow Exchange|Moscow Stock Exchange]]. The IT Army posted that it had taken them only five minutes to render the website inaccessible.<ref>{{cite web |last1=Uberti |first1=David |title=Hackers Target Key Russian Websites |url=https://www.wsj.com/articles/volunteer-hackers-join-ukraines-fight-against-russia-11646082782|date=28 February 2022 |website=[[The Wall Street Journal]]}}</ref><ref>{{cite web |last1=Coble |first1=Sarah |title=Moscow Exchange Downed by Cyber-Attack |url=https://www.infosecurity-magazine.com/news/moscow-exchange-cyber-attack/ |website=Infosecurity Group|date=28 February 2022 |access-date=3 March 2022}}</ref><ref>{{cite news |title="Disabled in 5 minutes": Ukrainians hack Moscow Stock Exchange |url=https://www.pravda.com.ua/eng/news/2022/02/28/7326765/ |access-date=3 March 2022 |date=28 February 2022|website= pravda.com.ua}}</ref> |
* On 28 February 2022, the IT Army hacked the website of the [[Moscow Exchange|Moscow Stock Exchange]]. The IT Army posted that it had taken them only five minutes to render the website inaccessible.<ref>{{cite web |last1=Uberti |first1=David |title=Hackers Target Key Russian Websites |url=https://www.wsj.com/articles/volunteer-hackers-join-ukraines-fight-against-russia-11646082782|date=28 February 2022 |website=[[The Wall Street Journal]]}}</ref><ref>{{cite web |last1=Coble |first1=Sarah |title=Moscow Exchange Downed by Cyber-Attack |url=https://www.infosecurity-magazine.com/news/moscow-exchange-cyber-attack/ |website=Infosecurity Group|date=28 February 2022 |access-date=3 March 2022}}</ref><ref>{{cite news |title="Disabled in 5 minutes": Ukrainians hack Moscow Stock Exchange |url=https://www.pravda.com.ua/eng/news/2022/02/28/7326765/ |access-date=3 March 2022 |date=28 February 2022|website= pravda.com.ua}}</ref> |
||
* On the same day, the IT Army hacked the website of [[Sberbank]], the largest bank in Russia. The IT Army had also launched attacks on other [[Russia]]n and [[Belarus]]ian sites, including the government websites of Russia and Belarus, the [[Federal Security Service|FSB]] and the Belarusian state news agency [[Belarusian Telegraph Agency|BelTA]], among others.<ref name="List of downed sites">{{cite news |last1=Goodin |first1=Dan |title=After Ukraine recruits an "IT Army," dozens of Russian sites go dark |url=https://arstechnica.com/information-technology/2022/02/after-ukraine-recruits-an-it-army-dozens-of-russian-sites-go-dark/ |access-date=3 March 2022 |work=arstechnica.com |date=1 March 2022}}</ref><ref>{{cite news |last1=Mott |first1=Nathaniel |title=Ukraine Enlists Hackers in 'IT Army' Targeting Russia, Belarus |url=https://www.pcmag.com/news/ukraine-enlists-hackers-in-it-army-targeting-russia-belarus |access-date=3 March 2022 |work=pcmag.com |date=27 February 2022}}</ref> |
* On the same day, the IT Army hacked the website of [[Sberbank]], the largest bank in Russia. The IT Army had also launched attacks on other [[Russia]]n and [[Belarus]]ian sites, including the government websites of Russia and Belarus, the [[Federal Security Service|FSB]] and the Belarusian state news agency [[Belarusian Telegraph Agency|BelTA]], among others.<ref name="List of downed sites">{{cite news |last1=Goodin |first1=Dan |title=After Ukraine recruits an "IT Army," dozens of Russian sites go dark |url=https://arstechnica.com/information-technology/2022/02/after-ukraine-recruits-an-it-army-dozens-of-russian-sites-go-dark/ |access-date=3 March 2022 |work=arstechnica.com |date=1 March 2022}}</ref><ref>{{cite news |last1=Mott |first1=Nathaniel |title=Ukraine Enlists Hackers in 'IT Army' Targeting Russia, Belarus |url=https://www.pcmag.com/news/ukraine-enlists-hackers-in-it-army-targeting-russia-belarus |access-date=3 March 2022 |work=pcmag.com |date=27 February 2022}}</ref> |
||
*According to Reuters, the group targets Russian power grids and railways to prevent Russian infrastructure from reaching Ukraine.<ref name="Reuters report 2" /> This included technologies such as [[GLONASS]].<ref name="Reuters report 2" /> |
*According to Reuters, the group targets Russian power grids and railways to prevent Russian infrastructure from reaching Ukraine.<ref name="Reuters report 2" /> This included technologies such as [[GLONASS]].<ref name="Reuters report 2" /> |
||
* Eight hundred Russian websites, including [[Roscosmos]], were attacked by the IT Army, from June 27 to July 10. They posted congratulatory messages to Ukrainian Constitution Day on those websites. Besides that, distributed denial of service attacks carried out by the IT army has crippled Russian ability to work on some CRM systems for extended periods.<ref>{{cite web |title=IT army attacks over 800 Russian websites in two weeks - Ministry of Digital Transformation |url=https://www.ukrinform.net/rubric-ato/3526518-it-army-attacks-over-800-russian-websites-in-two-weeks-ministry-of-digital-transformation.html |website=www.ukrinform.net |access-date=12 July 2022 |language=en}}</ref> |
* Eight hundred Russian websites, including [[Roscosmos]], were attacked by the IT Army, from June 27 to July 10. They posted congratulatory messages to Ukrainian Constitution Day on those websites. Besides that, [[ddos|distributed denial of service]] attacks carried out by the IT army has crippled Russian ability to work on some CRM systems for extended periods.<ref>{{cite web |title=IT army attacks over 800 Russian websites in two weeks - Ministry of Digital Transformation |url=https://www.ukrinform.net/rubric-ato/3526518-it-army-attacks-over-800-russian-websites-in-two-weeks-ministry-of-digital-transformation.html |website=www.ukrinform.net |date=11 July 2022 |access-date=12 July 2022 |language=en}}</ref> |
||
*[[Ministry of Digital Transformation]] reported about cyberattacks on over 6000 of Russian web resource in the period from February 26 to July 30.<ref>{{cite web|url=https://armyinform.com.ua/2022/08/01/za-5-misyacziv-it-armiya-ukrayiny-vyvela-z-ladu-ponad-6000-resursiv-rf/|title=За 5 місяців ІТ-армія України вивела з ладу понад 6000 ресурсів рф|date=1 August 2022| |
*[[Ministry of Digital Transformation (Ukraine)|Ministry of Digital Transformation]] reported about cyberattacks on over 6000 of Russian web resource in the period from February 26 to July 30.<ref>{{cite web|url=https://armyinform.com.ua/2022/08/01/za-5-misyacziv-it-armiya-ukrayiny-vyvela-z-ladu-ponad-6000-resursiv-rf/|title=За 5 місяців ІТ-армія України вивела з ладу понад 6000 ресурсів рф|date=1 August 2022|language=uk}}</ref> |
||
* In September 2022 the group had reportedly collaborated with [[Anonymous (hacker group)|Anonymous]] to commit cyberattack against [[Yandex Taxi]]'s systems, causing a traffic jam in [[Moscow]].<ref>{{cite web |title=L'attacco hacker a un'app di taxi ha gettato Mosca nel caos |url=https://www.wired.it/article/attacco-hacker-taxi-mosca/ |website=Wired Italia |access-date=25 September 2022 |language=it-IT |date=5 September 2022}}</ref> |
|||
* The group claimed to have hacked the website of [[Wagner group]] and stolen its personal data. On the defaced website, photos of dead soldiers were shown.<ref>{{cite web |title=Pro-Ukraine Hacktivists Claim to Have Hacked Notorious Russian Mercenary Group |url=https://www.vice.com/en/article/4ax459/pro-ukraine-hacktivists-claim-to-have-hacked-notorious-russian-mercenary-group |website=www.vice.com |date=20 September 2022 |access-date=25 September 2022 |language=en}}</ref> |
|||
* On Oct 7th 2022, the IT Army hacked the website of the [[Collective Security Treaty Organization|Collective Security Treaty Organization (CSTO)]], through which they congratulated the Russian president on his birthday.<ref>{{Cite web |title=Ukrainians hacked the site of the Collective Security Treaty Organization (ОДКБ) |url=https://vosveteit.zoznam.sk/it-armada-ukrajiny-vo-velkom-style-zablahozelala-putinovi-k-narodeninam-zazelali-mu-pohodlnu-cestu-do-haagu/ |access-date=Oct 8, 2022 |website=zoznam.sk|date=8 October 2022 }}</ref> |
|||
* In October 2023 they said they would abide by [[International Committee of the Red Cross rules of engagement for civilian hackers]] even if it put them at a disadvantage.<ref name=bbc-rules-of-engagement-issued-to-hacktivists>{{Cite news |title=Rules of engagement issued to hacktivists after chaos |url=https://www.bbc.com/news/technology-66998064 |last=Tidy |first=Joe |date=2023-10-04 |access-date=2023-10-15 |publisher=[[BBC News]]}}</ref> |
|||
== See also == |
|||
* [[Russo-Ukrainian cyberwarfare]] |
|||
* [[Starlink satellite services in Ukraine]], the use of SpaceX's large satellite constellation for warfare and communications in Ukraine |
|||
== References == |
== References == |
||
| Line 44: | Line 52: | ||
{{Authority control}} |
{{Authority control}} |
||
[[Category: |
[[Category:Reactions to the Russian invasion of Ukraine]] |
||
[[Category:Reactions to the 2022 Russian invasion of Ukraine]] |
|||
[[Category:Russian–Ukrainian cyberwarfare]] |
[[Category:Russian–Ukrainian cyberwarfare]] |
||
| IT Army of Ukraine | |
|---|---|
| IT-армія України | |
 | |
| Active | 26 February 2022 – present[1] |
| Country | Ukraine |
| Branch | Cyberwarfare |
| Size | ~1000 Ukrainian and foreign volunteers as of 3 March 2022[update][2] |
| Website | itarmy.com.ua |
The IT Army of Ukraine (Ukrainian: IT-армія України) is a volunteer cyberwarfare organisation created at the end of February 2022 to fight against digital intrusion of Ukrainian information and cyberspace after the beginning of the Russian invasion of Ukraine on February 24, 2022.[1][3] The group also conducts offensive cyberwarfare operations, and Chief of Head of State Special Communications Service of Ukraine Victor Zhora said its enlisted hackers would only attack military targets.[4]
On 26 February 2022, the Minister of Digital Transformation and First Vice Prime Minister of Ukraine, Mykhailo Fedorov announced the creation of the IT Army, which is mainly coordinating its efforts via Telegram and Twitter.[5][6]
According to Reuters, the Ukrainian government asked for volunteers from the country's hacker underground to help protect critical infrastructure and conduct cyber spying missions against Russian troops. Yegor Aushev, the co-founder of a Ukrainian cybersecurity firm Hacken,[7] wrote, "Ukrainian cybercommunity! It's time to get involved in the cyber defense of our country," asking hackers and cybersecurity experts to submit an application listing their specialties, such as malware development and professional references.[8]
The volunteers who joined the group are divided into offensive and defensive cyber units. While the offensive volunteer unit would help Ukraine's military conduct digital espionage operations against invading Russian forces, the defensive unit would be employed to defend infrastructure such as power plants and water systems.[1]
The Ukrainian government used Twitter and Telegram to share a list of Russian and Belarusian targets for the army to attack.[9] Russian ransomware operators responded by offering their assistance to counter the Ukrainian effort.[10]
|
Hacking in the 2020s
| |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Major incidents |
| ||||||||||
| Groups |
| ||||||||||
| Individuals |
| ||||||||||
| Major vulnerabilities publicly disclosed |
| ||||||||||
| Malware |
| ||||||||||
