Lithuania hit by Cyber Spetsnaz attack after recent ban on Russian railway goods
Cyber Spetsnaz is targeting Lithuanian government resources and critical infrastructure – the recent ban on Russian railway goods has caused a new spike of hacker activity on the Dark Web.
On June 22, Cyber Spetsnaz has announced multiple targets for coordinated DDoS attacks – the resources to be attacked are distributed between so-called “units” who are based on members and volunteers who joined previous and current campaigns.
According cybersecurity experts, the observed activity is expected considering war conflicts and follows today’s geopolitical agenda. Multiple sources interviewed by Security Affairs agreed that Cyber Spetsnaz began gaining more traction and involved multiple credible actors with DDoS capabilities.
Cyber Spetsnaz is leveraging relatively cost-effective means and methods of DDoS, by doing so they generate significant DDoS power by attacking compromised WEB-resources, WEB-sites, IoT devices and botnet networks belonging to other independent actors who agreed to join the campaign. The real impact of such a campaign may be different from what has been claimed in practice – the main goal is to generate short-term outages or temporarily unavailability of the resource to generate certain media narratives.
Notably, the list of targets represents a comprehensive list of critical infrastructure resources in Lithuania.
Current targets for cyberattack include:
- logistics firms (Adrem, Talga)
- transport infrastructure (Transimeksa, Kelprojektas)
- major financial institutions of Lithuania (Central Bank, Stock Exchange, Swedbank, SEB, etc.)
- ISPs (Tele2, Telia, Penki, Mezon, Cgates, Fastlink)
- airports (Vilnius Airport, Kaunas Airport, Palanga Airport, Siauliai Airport)
- energy companies (Ignitis Grupe, Ministry of Energy, Aedilis)
- major media outlets (Delfi, Nedelia, ZW)
- government WEB-resources (President, Ministry of Foreign Affairs, Ministry of Justice, Police).
Cybersecurity experts from Lithuania have been interviewed independently – they’re aware of this group and are ready to protect national resources.
In the same time, following massive cyber attacks on Russia's government sites and businesses believed to be supporting the Kremlin, Anonymous has hit Russia's military force itself with the drone hack.