A cyberattack on Russian state-owned flagship service Aeroflot brought on a mass outage to the corporate’s pc techniques on Monday, Russia’s prosecutor’s workplace stated, forcing the airline to cancel greater than 100 flights and delay others.
Ukrainian hacker group Silent Crow and Belarusian hacker activist group the Belarus Cyber-Partisans, which opposes the rule of Belarusian President Alexander Lukashenko, claimed accountability for the cyberattack.
Photographs shared on social media confirmed lots of of delayed passengers crowding Moscow’s Sheremetyevo airport, the place Aeroflot relies. The outage additionally disrupted flights operated by Aeroflot’s subsidiaries, Rossiya and Pobeda.
Whereas many of the flights affected had been home, the disruption additionally led to cancellations for some worldwide flights to Belarus, Armenia and Uzbekistan.
In a press release launched early Monday, Aeroflot warned passengers that the corporate’s info know-how system was experiencing unspecified difficulties and that disruption might observe.
Russia’s Prosecutor’s Workplace later confirmed {that a} cyberattack had brought on the outage and that it had opened a prison investigation.
Kremlin spokesperson Dmitry Peskov known as studies of the cyberattack “fairly alarming,” including that “the hacker menace is a menace that continues to be for all massive corporations offering companies to most of the people.”
Silent Crow claimed it had accessed Aeroflot’s company community for a yr, copying buyer and inner information, together with audio recordings of cellphone calls, information from the corporate’s personal surveillance on staff and different intercepted communications.
“All of those assets at the moment are inaccessible or destroyed and restoring them will probably require tens of thousands and thousands of {dollars}. The harm is strategic,” the channel purporting to be the Silent Crow group wrote on Telegram. There was no solution to independently confirm its claims.
The identical channel additionally shared screenshots that appeared to indicate Aeroflot’s inner IT techniques, and insinuated that Silent Crow might start sharing the info it had seized within the coming days.
“The private information of all Russians who’ve ever flown with Aeroflot have now additionally gone on a visit — albeit with out baggage and to the identical vacation spot,” it stated.
The Belarus Cyber-Partisans advised The Related Press that that they had hoped to “ship a crushing blow.” The group has beforehand claimed accountability for a variety of cyberattacks, and stated in April 2024 that that they had been in a position to infiltrate the community of Belarus’ predominant KGB safety company.
“This can be a very large-scale assault and one of the crucial painful when it comes to penalties,” group coordinator Yuliana Shametavets stated. She stated that the group had been making ready the assault for a number of months, and had been in a position to penetrate the Aeroflot community by exploiting numerous vulnerabilities.
Belarus is an in depth ally of Russia. Lukashenko, who has dominated Belarus with an iron hand for greater than 30 years and has relied on Russian subsidies and assist, allowed Russia to make use of his nation’s territory to launch a full-scale invasion of Ukraine on Feb. 24, 2022, and to deploy a few of Moscow’s tactical nuclear weapons in Belarus.
Russia’s airports have repeatedly confronted mass delays over the summer time because of Ukrainian drone assaults, with flights grounded amid security considerations.