Ukraine pins blame for cyberattack on Russia and Belarus

It has been concluded in a Ukrainian probe that “all evidence” points to Russia having been behind a cyberattack last week that disabled several government websites. 

The hacks were aimed at “destabilising” the situation in Ukraine, according to findings of a joint investigation of several Ukrainian state agencies published on Sunday.  

The former Soviet nation endured a mass cyberattack at several of its ministries and public services on Friday. Russia already denied accusations it was behind the hacks.  

Several Ukrainian entities are conducting their own analyses, and another official, citing other findings, earlier pointed the finger at Belarus. 

Preliminary findings show that a group of hackers known as UNC1151 from Belarus, a close Russian ally, may have led the operation, Serhiy Demedyuk, deputy head of Ukraine’s National Security and Defence Council, said in a text message. 

UNC1151 is a cyber-spy group related to the Belarus security service, Demedyuk said. The group uses a tactic known as “credential harvesting”, or gaining unsanctioned access to mail accounts, followed by the spread of malware, he said. 

According to Demedyuk, the hacking group has been active in Lithuania, Latvia, Poland and Ukraine, and often use a narrative that mocks Nato’s presence in the Northern Europe. The Belarusian government has not responded to Ukraine’s claims.  

Tensions in the region have escalated in recent weeks as Russia continues to keep troops near its border with Ukraine, a move that may be preparation for a full-scale invasion, according to Ukraine’s Western partners. 

Russia wants Nato to bar Ukraine and other former Soviet states from membership, and to roll back its forces to positions they held in 1997. 

Bloomberg News. More stories like this are available on bloomberg.com