Issue 44

Hackers Urged to Target GLONASS with Cyber Attacks

3 Mar 2022: Hacker group announced on Telegram it will try to compromise GLONASS, the Russian GPS consellation. Other targets include Russian media, power grid & railways. - Ukraine's hacker underground named GLONASS as one of its top priorities, according to media reports citing the “IT army” Telegram channel - On…

3 Mar 2022: Hacker group announced on Telegram it will try to compromise GLONASS, the Russian GPS consellation. Other targets include Russian media, power grid & railways.

– Ukraine’s hacker underground named GLONASS as one of its top priorities, according to media reports citing the “IT army” Telegram channel

– On Wednesday, hacker group NB65 said they successfully compromised Russia’s space agency (Roscosmos) and its vehicle monitoring system.

– NB65 claimed they deleted the agency’s WS02 software, an open-source application program interface management tool, rotated credentials, and shut down the server.

NB65 claimed the attack prevented Russia from controlling their spy satellites.

– Head of Roscosmos, Dmitry Rogozin, denied the organization’s infrastructure was hacked yet reiterated that hacking a satellite would constitute a reason for war.

– The hacker community started rallying to help Ukrainians beginning with the Russian invasion on 24 Feb.

– With Anonymous being the most prominent one, numerous hacker groups and researchers partake in various campaigns to help Ukraine. Cyber activists targeted Russian state-controlled media outlets TASS, Kommersant, Izvestia, Fontanka, and RBC, pushing them offline.

Anonymous claimed responsibility for disabling prominent Russian government, news, and corporate websites. They also leaked data from entities including Roskomnadzor, the federal agency responsible for censoring Russian media.

– An independent cyber security analyst noted Russian noted 92 of 100 analyzed databases were compromised…and the activities correlated closely to Anonymous’ claims.

– An unknown group has set up a website tool that allows people to participate in distributed denial of service (DDoS) attacks against Russian websites that it claims are spreading disinformation.

– Cybersecurity firms urged civilians to join the cyberwar via an app to attack Russian websites spreading disinformation.

In spite of the calls to action there have been no reported disruptions to GLONASS or other Russian space capabilities since the beginning of the conflict. Most of the cyber activity has disrupted websites of major Russian organizations and media agencies.

Russian television feed with pro-Ukrainian messages.

Anonymous-style cyberwar graphic related to attacks against Russian targets.

NB65 joins the cyberwar.

Cybersecurity screenshot associated with attacks on Russian systems.

Anonymous cyberwar graphic referencing breached Russian and Belarusian targets.