Ukrainian intelligence operatives conducted a cyberattack on the IT infrastructure of one of Russia’s largest private internet service providers serving security agencies, according to a source in Ukrainian intelligence speaking to Hromadske.
The operation targeted the Filanko group of companies, which provides internet and hosting services to over 20,000 clients including Beeline, MGTS, 24tv, and Russian security structures, the source reported.
Cyber specialists successfully disabled 600 virtual machines and 24 hypervisors, the intelligence source detailed. The attack destroyed 800 terabytes of data and eliminated 11 physical servers from the data center operations.
The scope of the infrastructure damage extended to monitoring systems. “74 Raspberry Pi devices for remote data monitoring from the data center and 12 terabytes of sensor data” were destroyed, according to the source. Office operations suffered additional losses with 5 physical servers and 5 terabytes of data eliminated.
Network infrastructure bore significant damage as operatives disabled 3,100 switching equipment devices. Among these were “37 service routers, core routers, and network edge routers,” the source specified.
Financial systems also came under attack. Intelligence operatives “emptied wallets in the company’s personal account totaling $1.3 million,” the source reported.
The operation included a symbolic element on a related website. On the main page of a site selling “emergency briefcases” for Russian security structures, operatives published a photograph of eliminated Russian occupiers in Ukraine, according to the intelligence source.