Microsoft disrupts Russian cyberattacks targeting Ukraine by seizing domains
Microsoft has seized domains used by a hacking group linked to Russia’s GRU.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Seven internet domains used by Strontium, a Russian state-sponsored hacking group, were seized by Microsoft last week. This has been part of a years-long investigation into the Russian hacker group, which has allegedly been conducting a series of cyberattacks on Ukraine since the Russian-led invasion started nearly two months ago.
Strontium has ties to Russia’s military intelligence unit, GRU, and has also gone by the names APT28 and “Fancy Bear.” The group is reportedly responsible for massive cyberattacks such as the infamousDNC hack in 2016and malware attacks on numerousbusinesses worldwide.
In ablog post, Tom Burt, VP of customer security and trust at Microsoft, broke down how and when the company made its move against the hacker group:
“On Wednesday, April 6th, we obtained a court order authorizing us to take control of seven internet domains Strontium was using to conduct these attacks. We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable victim notifications.”
The domains in question were being used to target Ukrainian government institutions and media organizations. Microsoft suspected that Strontium was trying to “establish long-term access to the systems of its targets, provide tactical support for the physical invasion and exfiltrate sensitive information.”
According to Microsoft, it wasn’t just Ukraine; the hackers were targeting the US and European government institutions related to foreign policy. Microsoft has been investigating Strontium since 2016 and has taken legal action at least 15 times, and has taken control of more than 100 Strontium-controlled domains.
Best SSD for gaming: The best solid state drives aroundBest PCIe 4.0 SSD for gaming: Speedy drivesThe best NVMe SSD: Slivers of SSD goodnessBest external hard drives: Expand your horizonsBest external SSDs: Fast, solid, and portable
During the Russian invasion, Ukrainian IT and tech workers havebanded together onlineto counter-hack the cyber attackers by launching DDOS and phishing attacks on Russian digital infrastructure in the ongoing cyber warfare.“The Strontium attacks are just a small part of the activity we have seen in Ukraine, Burt continues. “Before the Russian invasion, our teams began working around the clock to help organizations in Ukraine, including government agencies, defend against an onslaught of cyberwarfare that has escalated since the invasion began and has continued relentlessly.”
The biggest gaming news, reviews and hardware deals
Keep up to date with the most important stories and the best deals, as picked by the PC Gamer team.
Jorge is a hardware writer from the enchanted lands of New Jersey. When he’s not filling the office with the smell of Pop-Tarts, he’s reviewing all sorts of gaming hardware, from laptops with the latest mobile GPUs to gaming chairs with built-in back massagers. He’s been covering games and tech for over ten years and has written for Dualshockers, WCCFtech, Tom’s Guide, and a bunch of other places on the world wide web.
The AMD Ryzen 7 9800X3D just hit 6.9 GHz and thousands of in-game fps with an overclock and it barely even broke a sweat
Australia proposes social media ban for everyone under the age of 16, citing concerns about young people’s mental wellbeing
There is simply too much going on in Black Ops 6 Season 1
