Menu

Microsoft repelled cyber attacks on Ukraine. We are talking about the Russian hacker group Strontium

Microsoft Corporation announced the repelling of a cyber attack on Ukraine by the Russian hacker group Strontium (Strontium). This is reported on the website of the American company.

In particular, the corporation recently observed attacks on Ukrainian organizations by the Strontium group, whose members are associated with the Russian GRU.

"This week we managed to thwart some Strontium attacks on facilities in Ukraine. On Wednesday, April 6, we received a court order that allows us to take control of the seven internet domains that Strontium used to carry out these attacks. We redirected these domains and took control of them, which allowed us to mitigate their current use and prevent attacks," the report says.
What was the target of the attack

According to Microsoft, Strontium used this infrastructure to target Ukrainian institutions, including media organizations.

The cyberattacks also targeted government agencies and think tanks in the United States and the European Union that deal with foreign policy.

"We believe that Strontium was trying to establish long-term access to its target systems, provide tactical support for physical intrusion, and extract confidential information. We have notified the government of Ukraine of our intentions and actions that we have taken," the company said.

They also said that they have been monitoring Strontium since 2016 and are taking legal and technical measures to seize the infrastructure used by this hacker group. In particular, we have already managed to create a legal process that allows us to quickly obtain court decisions on this work. Previously, the corporation took measures as part of this process 15 times to seize control of more than 100 domains controlled by Strontium.

About other cyber attacks and assistance to Ukraine

According to Microsoft, Strontium attacks are only a small part of the activity that they have observed in Ukraine. Before the Russian invasion, the American company's teams began working around the clock to help organizations in Ukraine, in particular government agencies, protect themselves from the onslaught of cyberwarfare, which has escalated since the beginning of the invasion and continues unabated.

"Since then, we have seen almost all Russian national structures conduct a full-scale offensive against the Ukrainian government and critical infrastructure. And we continue to work closely with the government and organizations of all kinds in Ukraine to help them protect themselves from this onslaught," the tech giant assured.

Moreover, they announced that in the coming weeks they plan to more fully consider the scale of cyber warfare in Ukraine.

Earlier, the American corporation Microsoft disabled the Russian mail service Mail.ru from their servers.

Back in early March, Microsoft announced the suspension of services and product sales in Russia due to its war against Ukraine.

At the same time, it was reported that major technology companies Microsoft, SAP and IBM, despite the sanctions of Western countries, are in no hurry to leave the market of Russia, which unleashed a war against Ukraine.