Russian Satellite Internet Downed via Attackers Claiming Ties to Wagner Group
Attribution for the cyberattack on Dozor-Teleport remains murky, but the effects are real — downed communications and compromised data.
![Wagner Group patch and logo Wagner Group patch and logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt2ab1f9cd566f3b84/64f178f2875cc93fc10660ad/Wagner_Group_Nikolay_Vinokurov_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Russian satellite Internet provider Dozor-Teleport was knocked offline in the early hours of June 29, dealing a communications blow to the company's customers, which according to reports include Russian military and energy interests.
The Wagner Group, the mercenary army once fighting for Russia, and now seemingly turned against Putin's government, claimed it was behind the cyberattack against the satellite communications provider. But experts aren't convinced.
Russian reports say full recovery of Dozor-Teleport could take up to two weeks. The company's general director Alexander Anosov confirmed the breach to Russian media, adding that early investigations show the company was breached through a third-party cloud provider.
The threat actors behind the compromise explained on Telegram they were able to deliver malware to several satellite terminals to take them offline, reports said. For additional proof, the threat actors posted internal data stolen from the Dozor-Teleport network.
"The whole world watched our actions, listened to our every word. We showed how easily we can reach Moscow in a day without meeting any resistance," the cyber attackers said in their Telegram message.
The reference seems to add to the narrative that the cyberattack was launched by Wagner Group, which, under the command of the now-exiled Yevgeny Prigozhin, marched on Moscow in protest of the Putin government's execution of the Russian invasion of Ukraine.
Was This a False Flag?
But the Wagner Group's Telegram channel has made no mention of the cyberattacks so far, according to reports on the incident.
Cybersecurity and international relations expert Oleg Shakirov has been monitoring the breach and assessed in a June 29 tweet that "Wagner's involvement is very unlikely."
He instead suspects the Dozor-Teleport compromise is the work of the Ukrainian military. "Some Russian websites have also been defaced presumably on behalf of Wagner (disgruntled that Russia didn't fulfill its part of the bargain)," Shakirov added. "But again this looks like Ukrainian false flag trolling."
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024