Home
Home

Media

Media & Content

211
cyberattacks and operations

In the Russian-Ukraine war, why do cyberattacks on the Media sector matter?

The media sector plays a vital role in providing information, as well as forming and informing public opinion. The use of botfarms to spread fake accounts and messages at scale to audiences, through to attacks to deface websites, this conflict’s circulation of disinformation and propaganda is being waged online with harmful offline impacts. Attacks on the media sector have been relentless in their attempt to disrupt and/or influence the information space through the spread of disinformation and propaganda and disabling or disrupting services to limit access to timely, reliable and official information to populations in both Ukraine and Russian Federation.

What types of attacks have been documented against the sector?

Which countries have seen attacks on the sector in the context of the war?

+
-

What impact do these attacks have on people?

Access to news and information services during an armed conflict is a vital public interest for a population as it is a means to receive official information from national or local authorities. News from media outlets can also help to inform the decision making of the population about the risks to safety, to flee or remain in an area, access to humanitarian aid, etc.

The spread of misinformation (incorrect or misleading information) and disinformation (deliberately deceptive) may cause harm to people and organizations. “Disinformation in armed conflict may pose several distinctive forms of harm to civilians: exposure to retaliatory violence, distortion of information vital to securing human needs, and severe mental suffering.” (Source IRRC,) Thus access to accurate, timely and reliable information is a civilian necessity during periods of armed conflict and measures are required in order to prevent the spread of, or counter, misinformation and disinformation.

You've been the target of a cyberattack?Share details

What are the primary digital impacts observed on the sector by country?

Can history shed light on the impact of attacks on this sector?

24 February 2022 – The Kyiv Post, Ukraine

On 24th February 2022 the Kyiv Post reported that its site had been under constant cyberattack in the conflict. The DDoS attack incapacitated their systems and they had to find alternative means to publish the news by posting shortened stories on Facebook, Twitter, and LinkedIn.

Societal harm / impact:

  • Created logistical problems for personnel and it was more difficult for employees to communicate amongst themselves.
  • The attack attempted to limit the public’s access to up to date, reliable, objective information during an escalating conflict.

Which threat actors have been linked to attacks on the sector during the conflict?

Name
Type
Origin
Number of attacks
People's CyberArmyCollective
RU
39
NoName057(16)Collective
RU
33
Anonymous RussiaCollective
RU
13
IT Army of UkraineNation State
UA
13
Netside GroupCollective
Unknown
9
KillNetCollective
RU
8
PhoenixCollective
UA
7
BlueNet RussiaUnknown
Unknown
6
BloodnetCollective
Unknown
6
AnonymousCollective
Unknown
5
Net Worker AllianceCollective
Unknown
5
MiraiCollective
RU
3
Kvazar DDoSCollective
Unknown
3
Anonymous SudanCollective
unknown
3
Legion Cyber SpetsnazCollective
RU
3
APT28Nation State
RU
2
ICC_H@ckTeamCollective
RU
2
XakNetCollective
RU
2
SandwormNation State
RU
2
Russian Hackers TeamCollective
Unknown
2
National Hackers of Russia (HXP)Collective
Unknown
2
Structura National TechnologiesNation State
Unknown
2
Cyber CatCollective
Unknown
2
NLBUnknown
Unknown
2
Zulik GroupUnknown
Unknown
2
UNC1151Nation State
BY
1
NB65Collective
Unknown
1
UAC-0099Unknown
Unknown
1
Cyber PalyanitsaCollective
UA
1
Red Hackers AllianceCollective
Unknown
1
AnonymousX777ZCollective
Unknown
1
KillMilkIndividual
RU
1
Bear IT ArmyCollective
RU
1
Anonymous ItaliaCollective
Unknown
1
Cyber DDoSCollective
Unknown
1
Avoid TeamCollective
Unknown
1
SolntsepekCollective
Unknown
1
Social Digital AgencyNation State
Unknown
0
Explore and filter attacks on a mapGeopolitical map

Explore the data

Search anything
Browse the table
1 / 22
Event Name
Event Country
Event Date
Event Type
Impact Category
Impact Description
Threat Actor Name
Campaign: DDoS attack against the website of a Ukrainian news media
Ukraine
2023-12-31
DDoSDisruptionDisrupted connectivity to the website. People's CyberArmy
DDoS attack against the website of a Ukrainian news media
Ukraine
2023-12-29
DDoSDisruptionDisrupted connectivity to the website. People's CyberArmy
Campaign: DDoS attack against the website of an Austrian press agency
Austria
2023-12-23
DDoSDisruptionDisrupted connectivity to website.NoName057(16)
Campaign: DDoS attack against the website of an Austrian press agency
Austria
2023-12-19
DDoSDisruptionDisrupted connectivity to website. Website unavailable to foreign IP addresses.NoName057(16)
DDoS attack against the website of a Ukrainian news media
Ukraine
2023-12-13
DDoSDisruptionDisrupted connectivity to the website. People's CyberArmy
Cyber-enabled information operation against a US news media
United States
2023-12-09
Cyber-Enabled Information OperationDisinformationA pro-Russian message posing as a news ad from the news media outlet was broadcasted on a billboard.Unknown
DDoS attack against the website of a Ukrainian news media
Ukraine
2023-11-21
DDoSDisruptionDisrupted connectivity to the website. People's CyberArmy
Campaign: DDoS attacks against the websites of two Polish news medias
Poland
2023-11-01
DDoSDisruptionDisrupted connectivity to the websites. People's CyberArmy
DDoS attack against the website of a Russian news media based in Latvia
Latvia
2023-10-22
DDoSDisruptionDisrupted connectivity to the website.Zulik Group
Campaign: DDoS attack against the websites of two Lithuanian news medias
Lithuania
2023-10-21
DDoSDisruptionDisrupted connectivity to the websites. NoName057(16)
Donate