The Operational Center for Response to Cyber Incidents of the State Center for Cyber Protection of the State Special Communications Service published a report on the results of the Vulnerability Detection and Response to Cyber Incidents System in the 2nd quarter of 2022.
In total, 19 billion events were processed, collected using tools for monitoring, analyzing and transmitting telemetric information about cyber incidents and cyber attacks. The number of registered and processed cyber incidents has increased to 64. As before, the main goal of hackers is cyber espionage, disrupting the availability of government information services and destroying information systems with the help of wiper programs.
In the second quarter of 2022, a significant increase in the activity of hacker groups in the distribution of malicious software was recorded; among which there are both programs that steal data, and those that are aimed at destroying data. Compared to Q1 2022, the number of information security (IS) events in the Malicious Program Code category increased by 38%.
At the same time, the number of critical IS events originating from Russian IP addresses decreased by 8.5 times. This is primarily due to the fact that providers of electronic communication networks and services that provide access to the Internet have blocked the IP addresses used by rf. It was these IP addresses that carried out cyber attacks on Ukrainian information resources, disseminated fake information regarding the discrediting of state bodies during the Russian-Ukrainian war.
However, most cyber incidents are associated with hacker groups funded by the Russian government. Actual hacker groups that attacked the information resources of Ukraine:
- UAC-0010 (Gamaredon, Armageddon, PrimitiveBear);
- UAC-0056 (Lorec53, SaintBear, GraphSteal, GrimPlant);
- UAC-0028 (APT28, Fancy Bear, Iron Twilight, Sednit);
- UAC-0098;
- UAC-0082;
- UAC-0113.
In the second quarter of 2022, the main targets of hackers from the Russian Federation were the Ukrainian media, the government and local authorities.
The full text of the SCDC report is available at the following link ( PDF ).
Source: State Special Communications Service
