
Hacker groups Silent Crow and “Cyber Partisans BY” announced an attack on Aeroflot, as a result of which “the internal IT infrastructure” of the company was completely compromised and destroyed. The hackers called their operation “a direct message to the FSB, NKTsKI, RT-Solar and other so-called ‘cyber defenders’.” As a result of their actions, Aeroflot canceled more than 40 flights.
In order not to miss new texts from “Layout”, subscribe to our telegram channel
As the hackers' message states, they were inside Aeroflot's corporate network for a year, "deepening to the very core of the infrastructure - Tier0." They claim that they were able to obtain and download a complete array of flight history databases, compromise all critical corporate systems, gain control of the personal computers of employees, including senior management, copy data from wiretapping servers, and extract data from personnel surveillance and control systems.
“As a result of the actions, about 7,000 servers, physical and virtual, were destroyed. The volume of information received is 12TB databases, 8TB files from Windows Share, 2TB corporate mail. All of these resources are now inaccessible or destroyed; restoration will require perhaps tens of millions of dollars. The damage is strategic,” the hackers said in a statement.
They promised to begin publishing some of the data obtained in the near future. At the end of the message, the hackers wrote: “Glory to Ukraine! Long live Belarus!”
Due to the glitch, Aeroflot canceled 42 flights. “There was a failure in the airline’s information systems. There may be interruptions in services. In this regard, a forced adjustment is expected in the schedule of flights, including through postponement and cancellation,” the carrier said in a statement.
As the z-channel about aviation “Aviatorschina” writes , the hacker attack completely paralyzed the work of Aeroflot. According to the channel’s interlocutors, computers do not work either in Sheremetyevo or in the company’s offices. In Melkisarovo, where Aeroflot’s office is located, even the electricity went out—according to preliminary data, it was turned off so that no one could use the computer and log into the company’s system.
The Kremlin called reports of the attack on Aeroflot “alarming.” “The information that we read in the public domain is quite alarming. But the hacker threat is a threat that remains for all large companies that provide services to the public,” said Vladimir Putin’s press secretary Dmitry Peskov.
In recent months, aviation disruptions have regularly occurred in Russia. Most often this happens due to attacks by Ukrainian drones. The last major collapse occurred just a week ago: restrictions were introduced at all four Moscow airports - Vnukovo, Sheremetyevo, Domodedovo and Zhukovsky. According to Vedomosti estimates, the departures and arrivals of more than 300 flights were delayed.
The new Minister of Transport Andrei Nikitin , who replaced Roman Starovoyt , said the Ministry of Transport cannot predict when the “Carpet” plan will be introduced and how long it will last - this is the task of the military.
Photo: Airbus A320 passenger aircraft of Aeroflot airlines at Moscow Sheremetyevo Airport, September 16, 2021. Leonid Faerberg/SOPA Images/Sipa USA
Support “Vestka” - it’s important and safe →