A group of Russian hackers targeted computer systems linked to the Ukrainian government and 26 NATO allies, including the U.S., in an effort to support Russia’s invasion of Ukraine, federal prosecutors revealed on Thursday.
The Department of Justice unveiled a superseding indictment charging five Russian GRU officers and one civilian with conspiracy to commit computer intrusion and wire-fraud conspiracy. The U.S. is offering a $10 million reward for information leading to their location or details on their cyber campaign.
The indictment alleges that the hackers utilized malware called “WhisperGate” to damage and leak data, including patient health records, from Ukrainian systems unrelated to military or defense. This was done to create fear among Ukrainian citizens about their government systems and personal data security. Subsequently, the hackers targeted computer systems in the U.S. and 25 other NATO countries providing aid to Ukraine.
RELATED STORY | Right-wing influencers linked to Russian influence operation
Assistant Attorney General Matthew G. Olsen of the National Security Division stated, “The GRU’s WhisperGate campaign, including targeting Ukrainian critical infrastructure and government systems of no military value, is emblematic of Russia’s abhorrent disregard for innocent civilians as it wages its unjust invasion.”
Court documents indicate that on Jan. 13, 2022, the hackers employed a U.S.-based company’s services to disseminate WhisperGate across various Ukrainian government networks, leading to the destruction of data in multiple Ukrainian government departments.
After compromising some targeted systems, the hackers defaced websites to instill fear among Ukrainians and later offered the stolen data for sale. The hackers also probed for vulnerabilities in protected computer systems of 26 NATO countries and targeted federal government systems in Maryland multiple times.
RELATED STORY | Ukraine’s foreign minister resigns as part of Zelenskyy’s wartime reshuffle
Special Agent in Charge William J. DelBagno of the FBI Baltimore Field Office emphasized the collective effort to defend against such actions and pursue those responsible for cybercrimes. Olsen, in a press conference, highlighted the DOJ’s commitment to hold the hackers accountable and prevent others from assuming their roles.
The indicted individuals are Russian GRU members Yuriy Denisov, Vladislav Borovkov, Denis Denisenko, Dmitriy Goloshubov, Nikolay Korchagin, and civilian Amin Sitgal.