CyberBerkut
resembles emblem of special police unit "Berkut" | |
Formation | c. 2014 |
---|---|
Type | Virtual community;Voluntary association |
Purpose | Internet activism;Internet vigilantism |
Region served | Ukraine |
Membership | Unknown |
Website | cyber-berkut |
CyberBerkut (Russian: КиберБеркут, Ukrainian: КіберБеркут) is a modern organized group of pro-Russian hacktivists.[1] The group became locally known for a series of publicity stunts and distributed denial-of-service (DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites.[2] By 2018, this group was accused by western intelligence agencies, such as National Cyber Security Centre (United Kingdom) of being linked to the GRU, providing plausible deniability.[3]
Background
The group emerged after the dissolution of special police force "Berkut" that became notorious for its violent repression used during the EuroMaidan demonstrations.[4] The group is anonymous.[citation needed] Their proclaimed goals are fighting against neo-fascism, neo-nationalism and arbitrary power in Ukraine.[citation needed] To further this aim, CyberBerkut activists targeted the "Right Sector" IT resources.[citation needed] CyberBerkut targets included NATO, and its allies.[5]
Activity
- Attacks on NATO websites.[6][7]
- Attacks on U.S. private military companies.[8]
- Publication of correspondence of deputies of (political parties) Batkivshchyna and Ukrainian Democratic Alliance for Reform.[9]
- Publication of correspondence with the United States Embassy in Ukraine and United States foundations.[10]
- Disclosure to public of telephone recording between Yulia Tymoshenko and Nestor Shufrych.[11][nb 1]
- Disclosure to public of telephone recording between EU High Representative for Foreign Affairs Catherine Ashton and Foreign Minister of Estonia Urmas Paet.[13]
- Blocking cellular phones of members of the Yatsenyuk Government and persons close to them.[14]
- Blocking Internet resources of Secretary of the National Security and Defence Council of Ukraine Andriy Parubiy and news portals: LigaBusinessInform and Ukrainian Independent Information Agency.[15]
- Publication of video materials that are blocked on YouTube.[1]
- Attempts at disrupting the recruitment of the National Guard of Ukraine.[citation needed]
- Attempted destruction of the electronic system of the Central Election Commission of Ukraine prior to the 2014 Ukrainian presidential election.[citation needed]
- Publishing lists of alleged Ukrainian military deserters[citation needed]
- Attempts at disrupting the work of the Central Election Commission of Ukraine by damaging the IFES system before the elections and blocking cellphones of their organisators.[16][17]
- Temporary disruption of the websites of the Ministry of Internal Affairs and the General Prosecutor of Ukraine. Websites of TV channels 1+1 and Inter were also temporary disrupted [citation needed].
- Email hacking and publication of the conversation between Ihor Kolomoyskyi and the persecutor of the Lviv Oblast, hacking of the computer and email of a person related to Ihor Kolomoyskiy.[18][19][20] Archives of the contents of 89 email accounts of Lviv oblast's prosecutor office employees.
- Hacking and publishing of the Minister of Internal Affairs Arsen Avakov's conversation.[21]
- Blocking of the website of the President of Ukraine Petro Poroshenko on 29 June 2014.[22]
- Publication of the real name and biography of Semen Semenchenko – Konstantin Grishin.[23]
- Hacking of the German Chancellery and the German Bundestag[24][5]
The group also publishes pro-Donetsk People's Republic videos.[1] In one of them it is claimed that Ukrainian security forces are living under a "Jewish occupation".[1]
Response
- Repeated blocking of CB's Facebook pages, although new ones have been made on the following day [citation needed].
- Likely in response to attacking the websites of Greystone Limited and Triple Canopy, CyberBerkut's websites have been temporarily disrupted. The websites started to work again on the following day.[citation needed]
- Arrests of people suspected in relation to CyberBerkut.[25]
See also
- Hacktivism
- Internet activism
- Hacker (term)
- Denial-of-service attack
- Trolls from Olgino
- Anonymous (group)
Notes
References
- ^ a b c d Inside a pro-Russia propaganda machine in Ukraine, BBC News (13 November 2017)
- ^ "Ukraine conflict: Hackers take sides in virtual war". BBC News. 2014-12-20. Retrieved 2020-10-20.
- ^ Sherman, Justin. "Russia's Cyber Threat to Ukraine Is Vast—and Underestimated". Wired. ISSN 1059-1028. Retrieved 2022-06-06.
- ^ Ukraine's Berkut police: What makes them special?, BBC News (25 February 2014)
- ^ a b Wagstyl, Stefan (7 January 2015). "Ukraine separatists claim cyber attack on German government sites". Financial Times.
- ^ "NATO websites targeted in attack claimed by Ukrainian hacker group Cyber Berkut". ABC News. 16 March 2014. Retrieved 18 February 2015.
- ^ jenny. "Ukrainian Hacker Group CyberBerkut Launched a DDoS-attack on NATO". revolution-news.com. Archived from the original on 24 February 2015. Retrieved 18 February 2015.
- ^ "CyberBerkut takes vengeance on American private military com". Pastebin. Retrieved 18 February 2015.
- ^ "Anonymous Ukraine Claims to hack and leak secret email conversations of Vitali Klitschko's UDAR party". HackRead. 13 February 2014. Retrieved 18 February 2015.
- ^ Jeffrey Carr. "Digital Dao". Retrieved 18 February 2015.
- ^ "Телефонный разговор между Шуфричем и Тимошенко. 18 марта 2014 года в 23:17 по украинскому времени". YouTube. 24 March 2014. Retrieved 18 February 2015.
- ^ "Tymoshenko admits speaking to Shufrych, says her words about Russians were edited". Interfax-Ukraine. Retrieved 18 February 2015.
- ^ Piret Pernik: teine taktika, sama strateegia (in Estonian)
- ^ Eduard Kovacs (17 March 2014). "Three NATO Websites Disrupted by Ukrainian Hackers of Cyber Berkut". softpedia. Retrieved 18 February 2015.
- ^ NATO websites hit in cyber attack linked to Crimea tension.
- ^ "На сайте проводят регламентные работы технического характера в преддверии дня выборов. Такие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить работоспособность сайта и увеличить его скорость", — сообщил РИА Новости пресс-секретарь комиссии Константин Хивренко.
- ^ "CNews: Õàêåðû çàÿâèëè îá óíè÷òîæåíèè ÈÒ-ñèñòåìû ÖÈÊ Óêðàèíû çà 2 äíÿ äî âûáîðîâ ïðåçèäåíòà". CNews.ru. Retrieved 18 February 2015.
- ^ ""КиберБеркут": Коломойский спонсировал части Нацгвардии на юго-востоке". 25 May 2014. Retrieved 2 August 2017.
- ^ ""Life.ru" — информационный портал". Life.ru. Retrieved 2 August 2017.
- ^ "КиберБеркут утверждает: на Украине готовится военный переворот". Retrieved 2 August 2017.
- ^ правды», Дарья ИВАШКИНА | Сайт «Комсомольской (22 April 2014). "Хакеры заявили, что взломали переписку Авакова об убийстве Сашко Билого". Retrieved 2 August 2017.
{{cite web}}
: CS1 maint: multiple names: authors list (link) CS1 maint: numeric names: authors list (link) - ^ "ТАСС: Международная панорама - Организация "Киберберкут" заблокировала сайт президента Украины". ТАСС. Retrieved 18 February 2015.
- ^ "Хакеры узнали настоящее имя командира батальона "Донбасс"". Вести.ру. 30 July 2014.
- ^ Cyber-Angriff auf Kanzleramt und Bundestag, Die Welt, 7 January 2015.
- ^ "СБУ задержала организацию хакеров "Киберберкут" - за попытку срыва выборов президента". finance.ua. Archived from the original on 27 May 2014. Retrieved 18 February 2015.
External links
- Official website
- CyberBerkut on Facebook
- CyberBerkut on X
- v
- t
- e
← 2000s | Timeline | 2020s → |
- Anonymous
- CyberBerkut
- GNAA
- Goatse Security
- Lizard Squad
- LulzRaft
- LulzSec
- New World Hackers
- NullCrew
- OurMine
- PayPal 14
- RedHack
- Teamp0ison
- TDO
- UGNazi
- Ukrainian Cyber Alliance
persistent threats
- Bangladesh Black Hat Hackers
- Bureau 121
- Charming Kitten
- Cozy Bear
- Dark Basin
- DarkMatter
- Elfin Team
- Equation Group
- Fancy Bear
- GOSSIPGIRL (confederation)
- Guccifer 2.0
- Hacking Team
- Helix Kitten
- Iranian Cyber Army
- Lazarus Group (BlueNorOff) (AndAriel)
- NSO Group
- Numbered Panda
- PLA Unit 61398
- PLA Unit 61486
- PLATINUM
- Pranknet
- Red Apollo
- Rocket Kitten
- Stealth Falcon
- Syrian Electronic Army
- Tailored Access Operations
- The Shadow Brokers
- xDedic
- Yemen Cyber Army
- Cyber Anakin
- George Hotz
- Guccifer
- Jeremy Hammond
- Junaid Hussain
- Kristoffer von Hassel
- Mustafa Al-Bassam
- MLT
- Ryan Ackroyd
- Sabu
- Topiary
- Track2
- The Jester
publicly disclosed
- Evercookie (2010)
- iSeeYou (2013)
- Heartbleed (2014)
- Shellshock (2014)
- POODLE (2014)
- Rootpipe (2014)
- Row hammer (2014)
- SS7 vulnerabilities (2014)
- JASBUG (2015)
- Stagefright (2015)
- DROWN (2016)
- Badlock (2016)
- Dirty COW (2016)
- Cloudbleed (2017)
- Broadcom Wi-Fi (2017)
- EternalBlue (2017)
- DoublePulsar (2017)
- Silent Bob is Silent (2017)
- KRACK (2017)
- ROCA vulnerability (2017)
- BlueBorne (2017)
- Meltdown (2018)
- Spectre (2018)
- EFAIL (2018)
- Exactis (2018)
- Speculative Store Bypass (2018)
- Lazy FP state restore (2018)
- TLBleed (2018)
- SigSpoof (2018)
- Foreshadow (2018)
- Dragonblood (2019)
- Microarchitectural Data Sampling (2019)
- BlueKeep (2019)
- Kr00k (2019)
2010 |
|
---|---|
2011 | |
2012 | |
2013 | |
2014 | |
2015 | |
2016 | |
2017 | |
2018 | |
2019 |
|