On 17 July, the cyber corps of the Defence Intelligence of Ukraine (DIU) carried out an attack on the network infrastructure of PJSC Gazprom, which is directly involved in Russia’s armed aggression against Ukraine, sources in the intelligence service told LB.ua.
The cyberattack caused significant damage to the network infrastructure of the Russian gas monopoly. In particular, a large amount of databases were destroyed and special software was installed.
According to a source in the DIU, the operation resulted in system administrators (about 20,000 sysadmins) being denied access to Gazprom’s information system and software being installed on Gazprom’s servers, which will subsequently destroy the data in Gazprom’s information system.
In addition, the following were destroyed:
- backup copies of Gazprom’s information system data;
- databases of about 390 subsidiaries of Gazprom and its branches, including Gazprom Teplo Energo, Gazprom Obl Energo, Gazprom Energozbit and hundreds of others;
- data from 1C server clusters (10 extremely high-powered servers) along with all files (contracts, orders, directives) belonging to Gazprom and its subsidiaries;
- data from auxiliary systems (data protection, server control, administration, and much more);
- databases of analytics systems for pipelines, valves, sensors, pumps, and more. Servers with analytics of SCADA systems responsible for managing technical infrastructure have been deleted;
- operating systems on accessible servers and damaged BIOS (servers do not turn on and will require physical intervention to restore operation).
“The degradation of Russian information systems to the technological Middle Ages continues. Taking this opportunity, we congratulate Russian ‘cyber experts’ on their latest ‘achievement’ and advise them to gradually replace mice and keyboards with hammers and pliers as their main tools of labour,” said a Ukrainian intelligence source.
A few days ago, cyber activists paralysed the work of one of the largest UAV manufacturers in Russia. All information on the servers of the company Gaskar Integration was destroyed, including backup copies. Among the stolen data is complete technical documentation on the production of drones, which has been transferred to the relevant specialists of the Ukrainian Defence Forces.