UK Uncovers Russian Cyber Campaign Aimed at Undermining Support for Ukraine

Investigations reveal extensive espionage tactics employed by Russian military intelligence to monitor aid shipments.

The UK has revealed a "malicious cyber campaign" orchestrated by Russian military intelligence, targeting numerous organizations involved in providing support to Ukraine. In collaboration with allies such as the US, Germany, and France, the UK's National Cyber Security Centre (NCSC) disclosed that since 2022, Russian military unit GRU Unit 26165, also known as Fancy Bear, has been engaged in sophisticated cyber operations against public and private sectors.

From defense suppliers to IT service providers, a wide array of organizations has been affected by the campaign. Notably, the group exploited weaknesses to gain access to approximately 10,000 internet-connected cameras stationed near military sites and railway stations. These cameras facilitated the monitoring of aid shipments entering Ukraine, and the hackers even utilized legitimate municipal services, including traffic cameras, for their surveillance operations.

"This malicious campaign by Russia's military intelligence service poses a significant threat to organizations aiding Ukraine," stated Paul Chichester, Director of Operations at NCSC. He urged organizations to be aware of the threat and implement the mitigation strategies outlined in the advisory to safeguard their networks from potential breaches.