Local sources from Russia: Ведомости, Новая газета Европа.
UK coverage: The Telegraph.
In a stunning development that caught the attention of the global cybersecurity community, Russia’s flagship carrier, Aeroflot, became the latest victim of a sophisticated cyberattack. This incident, occurring amidst a noticeable increase in Russian tourism to Europe, despite ongoing tensions over Ukraine, has highlighted the escalating cyber warfare landscape shaped by geopolitical conflicts. The hacker group known as Silent Crow, alongside ‘Cyberpartisans BY,’ has claimed responsibility for this audacious digital strike, which led to a significant operational collapse at Moscow’s Sheremetyevo airport on July 28th. With hundreds of passengers stranded and dozens of flights canceled, the attack not only disrupted travel plans but also raised serious concerns over the vulnerability of critical infrastructure to cyber threats.
According to sources from Ведомости, the true perpetrators behind this cyber onslaught remain shrouded in mystery, with speculations ranging from foreign intelligence agencies to internal saboteurs. Natalya Kasperskaya, a leading expert in the field, and Anton Gorelkin, Deputy Chairman of the IT Committee of the State Duma, both express concerns over the potential involvement of state actors in what appears to be a comprehensive campaign against Russia’s digital assets. The ambiguity surrounding the attackers’ true affiliations adds a layer of complexity to an already intricate web of digital warfare, where hacktivist groups and state-sponsored operatives often operate in the shadows.
Details emerging from Новая газета Европа paint a grim picture of the aftermath, with the hackers allegedly penetrating Aeroflot’s IT infrastructure, leading to the destruction of around 7,000 physical and virtual servers and the exfiltration of over 20 TB of sensitive data. Despite Aeroflot’s efforts to bolster its digital defenses, including partnerships aimed at enhancing cybersecurity and the adoption of Astra Linux as its operating system, the attackers succeeded in executing a cyberattack with potentially far-reaching implications, both financially and in terms of national security.
As the dust settles, the incident at Aeroflot serves as a stark reminder of the evolving nature of modern warfare, where battles are increasingly fought in the digital realm. The involvement of groups like Silent Crow, whose actions underscore the growing role of cyber warfare in geopolitical conflicts, highlights the urgent need for enhanced cybersecurity measures and international cooperation to safeguard critical infrastructure from such devastating attacks.
