Russian military hackers target Western firms delivering aid to Ukraine

India Today

23-05-2025

Russian military intelligence hackers targeted Western technology and logistics firms involved in delivering aid to Ukraine, according to the US National Security Agency.The cyber campaign, which began in 2022—the same year Russia launched its invasion of Ukraine, was aimed at gathering detailed intelligence on the nature and movement of international assistance flowing into Ukraine. As part of the effort, the hackers sought access to live feeds from over 10,000 internet-connected cameras, including traffic cameras and private surveillance devices, mainly near key transportation points such as ports, rail hubs, and border crossings. While most cameras were located in Ukraine, others were in neighboring countries like Poland and Romania.advertisement
The report linked the activity to Fancy Bear, a Russian military intelligence unit known for previous cyberattacks against the US and its allies. The hackers used common tactics such as spearphishing and exploited known vulnerabilities in poorly secured devices, particularly in small office and home networks.Despite not relying on advanced techniques, experts say the campaign was comprehensive and methodically organized, giving Russian forces insight into what type of aid—military or humanitarian—is being sent, and how it is transported. This could enhance Russian strategic planning or even enable targeted attacks on Ukraine's supply chain infrastructure.Officials did not reveal how successful the hackers were or how long they operated undetected. They warned that the threat is ongoing and urged organizations involved in aid logistics to bolster their cybersecurity defenses.Grant Geyer, chief strategy officer at cybersecurity firm Claroty, noted that the operation reflects a deep and deliberate attempt to monitor the entire supply chain. 'They're mapping out what equipment is moving, when, and by what means—whether it's via rail, ship, or plane,' he said.advertisementThe NSA warned that Russian cyber-espionage is expected to persist, and called on vulnerable entities to assume they are being targeted.The Russian Embassy in Washington did not respond to requests for comment.With inputs from Associated PressMust Watch