Russian ISP confirms Ukrainian hackers "destroyed" its network

Latest News on Ukrainian Hackers and Russian ISP Incident

Ukrainian Hackers Claim Responsibility for Russian ISP Network Destruction

Incident Details:

  • Date: The attack occurred overnight, with connectivity collapsing at midnight on Tuesday, January 7, 20255.
  • Impact: The Russian internet provider Nodex reported that its network was "destroyed" in a cyberattack, affecting both fixed-line and mobile services. The company's website remains inaccessible, and customers have been complaining about disrupted services on the company’s official social media page5.

Attribution:

  • The Ukrainian Cyber Alliance, a community of pro-Ukraine cyber activists, claimed responsibility for the attack. They stated that the company was "completely looted and wiped, and its data exfiltrated"5.

Previous Incidents:

  • In December 2024, Ukraine's military intelligence (HUR) claimed responsibility for an attack on Gazprombank, one of the largest financial institutions in Russia, causing widespread disruptions and leaving hundreds of thousands of Russians unable to complete money transfers or online payments5.
  • Earlier in January 2025, HUR also attacked the Russian railway system operator, destroying its servers, disabling workstations, and wiping backups5.

Cybersecurity Impact in Ukraine and Russia

Ukraine's Cybersecurity Market:

  • Despite the ongoing war with Russia, Ukraine's cybersecurity market has grown rapidly. The sector has increased fourfold over the past eight years, reaching an estimated value of $138 million last year. However, the market remains heavily reliant on foreign aid and faces significant challenges, including insufficient investment and weak regulations2.

Recent Cyberattacks in Ukraine:

  • Since the start of the war in 2024, Ukraine has faced numerous cyberattacks. The Computer Emergency Response Team of Ukraine (CERT-UA) detected over 4,300 cyber incidents last year, almost 70% more than the previous year. Large-scale cyberattacks on critical infrastructure networks, telecommunications, and financial institutions have led to increased awareness of threats2.

Russian Cybersecurity Incidents

Casio Ransomware Attack:

  • In October 2024, Japanese electronics giant Casio was targeted by the Underground ransomware gang. The attack resulted in the theft of personal data from approximately 8,500 individuals. The hacking group, linked to a Russia-linked cybercriminal group known as RomCom (or Storm-0978), accessed sensitive data and rendered many of Casio’s systems unusable4.

Other Notable Incidents:

  • A Russian internet provider Nodex reported that its network was "destroyed" in a cyberattack suspected to originate from Ukraine. The attack affected both fixed-line and mobile services, with the company working to restore systems from backups5.

Summary

The recent cyberattack on Russian ISP Nodex by Ukrainian hackers highlights the ongoing cyberwar between Ukraine and Russia. This incident is part of a series of attacks claimed by Ukrainian groups targeting Russian entities. Meanwhile, Ukraine's cybersecurity market continues to grow despite facing significant challenges and relying heavily on foreign aid. The rapid increase in cyberattacks in both countries underscores the escalating digital conflict.

Trustworthy Citations:

  • 5 Russian internet provider Nodex confirms its network was 'destroyed' following attack claimed by Ukrainian hackers.
  • 2 Ukrainian cyber market grows amid war but still lacks support and funding, report says.
  • 4 Casio says hackers stole personal data of 8,500 people during October ransomware attack.