logo

Sandworm's Kyivstar attack should serve as a reminder of the Kremlin crew's 'global reach'

ID: f1269899-5b8c-51b9-9225-d9135ba4a682

STIX ID: report--f1269899-5b8c-51b9-9225-d9135ba4a682

Feed Name: The Register (Security)

Threat Score
90/100

Date Published: 2024-01-05

Date Updated: 2026-04-26

Author: Jessica Lyons Hardcastle

...
...

The report attributes a months-long intrusion and destructive attack on Ukrainian telecom Kyivstar to Russia-linked Sandworm (VooDoo Bear), describing service outages for about 24 million users after attackers wiped thousands of virtual servers and PCs on 12 December 2023. The intrusion reportedly disrupted air-raid alerts and some banking services, provided attackers access to customer and location data, and is characterized by security firms as a high-sophistication, nation-state hybrid warfare operation with links to hacktivist fronts like Solntsepek.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.