Ukrainian Hackers Target Russian ISP: Major Server Wipeout Causes Widespread Internet Outages
In a significant incident impacting internet connectivity, Russian internet provider Nodex is working to recover its systems following a devastating cyberattack. This breach led to the compromise of its network and the erasure of its internal servers, disrupting services for its Russian customers substantially.
Details of the Cyberattack on Nodex
According to Cloudflare, a leading networking company that tracks internet trends, Nodex experienced a severe outage that began late on January 6, 2025. Reports indicate that the customer internet traffic dropped to zero during this period.
Impact on Services
- The outage commenced on January 6, 2025.
- All internet connectivity for Nodex customers was lost.
- Restoration efforts are currently underway, though no timeline has been provided.
Nodex’s Response to the Incident
Nodex confirmed the cyberattack via a post on the social media platform VK. The company stated, “The network has been destroyed. We are raising it from backup copies,” indicating that recovery efforts are reliant on previously saved data.
Attribution of the Cyberattack
The company later reported that the attack was attributed to Ukrainian hackers, which they claim resulted in a “complete failure” of their infrastructure. The hacking group known as the Ukrainian Cyber Alliance publicly took responsibility for the attack, sharing evidence from within Nodex’s network.
Insights from the Ukrainian Cyber Alliance
In a post on Telegram, the Ukrainian Cyber Alliance stated, “The Russian internet provider Nodex in St. Petersburg was completely looted and wiped. Data exfiltrated, while the empty equipment without backups was left to them.” This statement highlights the severity of the breach, which included access to critical systems.
Background on the Hacking Group
As reported by The Record, the Ukrainian Cyber Alliance is a collective of pro-Ukrainian activists established in 2016. This group has increasingly targeted Russian organizations following the onset of the full-scale invasion of Ukraine in 2022.
Current Status of Restoration Efforts
As of Wednesday evening, January 10, 2025, Nodex is continuing its restoration efforts to recover services for its customers in St. Petersburg, Russia. The company is working diligently to reinstate connectivity and ensure that its network is secure moving forward.
For more information on cybersecurity and internet service disruptions, you can explore resources on CISA or visit our internal pages on internet security best practices.
