Russian hackers had secret access to Ukraine’s telecom giant for months

Ukrainian cybersecurity officials have revealed that the Russian state-sponsored threat actor known as Sandworm was inside the systems of telecom operator Kyivstar since ...

by Vikash Kumawat
31 comments 1.3K views 2 minutes read

Ukrainian cybersecurity officials have revealed that the Russian state-sponsored threat actor known as Sandworm was inside the systems of telecom operator Kyivstar since at least May 2023.

The development was first reported by Reuters.

The incident, described as a “powerful hacker attack”, first came to light last month, disrupting access to mobile and internet services for millions of customers. Soon after the incident, a Russia-linked hacking group called Solntsepyok claimed responsibility for the breach.

Solntsepyok has been identified as a Russian threat group with affiliations to the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU), which also operates Sandworm.

Advanced persistent threat (APT) actors have a track record of carrying out disruptive cyberattacks, with Denmark accusing the hacking organization of targeting 22 energy sector companies last year.

Illia Vitiuk, head of the security service of the Cybersecurity Department of Ukraine (SBU), said that the attack against Kyivstar wiped out almost everything from thousands of virtual servers and computers.

The incident “completely destroyed the core of a telecom operator,” he said, noting that the attackers were likely to have had full access since at least November, months after gaining an initial foothold in the company’s infrastructure.

“The attack was meticulously prepared over the course of several months,” Vitiuk said in a statement shared on the SBU website.

Kyivstar, which has since restored its operations, said there was no evidence that customers’ personal data had been compromised. It is currently unknown how the threat actor entered its network.

It is noteworthy that the company had earlier dismissed as “false” the speculations about the attackers destroying its computers and servers.

The disclosure comes as the SBU revealed earlier this week that it took down two online surveillance cameras that were allegedly hacked by Russian intelligence agencies to spy on the defense forces and critical infrastructure in the capital city of Kyiv.

The agency said the agreement allowed the rival to gain remote control of the cameras, adjust their viewing angle, and connect to YouTube to capture “all visual information in range of the cameras.”

You may also like

Leave a Comment

* By using this form you agree with the storage and handling of your data by this website.

31 comments

Multichain June 6, 2025 - 12:53 am

A top resource in India.

Reply
Multichain Bridge June 6, 2025 - 12:58 am

My top crypto website in Singapore.

Reply
SushiSwap analytics June 6, 2025 - 12:30 pm

Highly recommended crypto platform.

Reply
SushiSwap risks June 6, 2025 - 12:32 pm

My expert opinion: this crypto site is reliable.

Reply
Fraxswap June 9, 2025 - 3:25 pm

Very reliable crypto service.

Reply
Fraxswap Finance June 9, 2025 - 3:55 pm

Appreciate the regular updates greatly.

Reply
Hyperliquid Trading June 9, 2025 - 10:20 pm

Super easy crypto platform to navigate.

Reply
Hyperliquid App June 10, 2025 - 10:12 pm

Smooth site, excellent performance.

Reply
Hyperliquid Staking June 11, 2025 - 12:43 pm

Excellent resource in crypto.

Reply
alpaca finance June 11, 2025 - 3:52 pm

Alpaca Finance

Reply
hyperliquid app June 11, 2025 - 6:21 pm

Why Use Hyperliquid?

Reply
hyperliquid June 11, 2025 - 7:50 pm

hyperliquid

Reply
Polygon Bridge error June 11, 2025 - 11:04 pm

Consistent high-quality crypto service.

Reply
Alpaca Finance onboarding June 11, 2025 - 11:16 pm

Ideal for business crypto management.

Reply
iziSwap tutorial 2025 June 12, 2025 - 10:44 pm

Excellent choice for Amsterdam crypto traders.

Reply
Matcha Swap June 13, 2025 - 3:25 pm

Matcha Swap

Reply
Hyperliquid App June 13, 2025 - 3:27 pm

Hyperliquid App

Reply
MultiChain June 13, 2025 - 4:35 pm

MultiChain

Reply
What Is Hyperliquid? June 13, 2025 - 5:51 pm

What Is Hyperliquid?

Reply
Hyperliquid June 16, 2025 - 11:27 am

Top 5 Strategies to Maximize Returns on Hyperliquid in 2025

Reply
RenBridge Protocol June 16, 2025 - 1:34 pm

Expert traders consider this platform essential.

Reply
RenBridge June 16, 2025 - 3:36 pm

Perfect crypto app for mobile users.

Reply
ticketflipping June 24, 2025 - 7:37 am

ticket flipping

Reply
best new bitcoin casinos June 24, 2025 - 9:09 am

newest bitcoin casinos 2025

Reply
SpookySwap June 30, 2025 - 2:03 pm

Spooky Swap

Reply
Mantle Bridge June 30, 2025 - 4:40 pm

Mantle Bridge

Reply
ParaSwap June 30, 2025 - 7:42 pm

ParaSwap

Reply
AI Trading Bot Crypto trading bot ai crypto trading bot June 30, 2025 - 9:47 pm

AI Trading Bot Crypto trading bot ai crypto trading bot

Reply
hyperliquid app user July 3, 2025 - 4:56 pm

Trading psychology influences decision making

Reply
hyperliquid July 3, 2025 - 7:05 pm

Need simpler guides asap

Reply
hyperliquid support July 4, 2025 - 9:39 am

Liquidity mining can be profitable but risky

Reply
Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More

-
00:00
00:00
Update Required Flash plugin
-
00:00
00:00