Organization:CyberBerkut

From HandWiki
CyberBerkut
CB
resembles emblem of special police unit "Berkut"
Formationc. 2014
TypeVirtual community;
Voluntary association
PurposeInternet activism;
Internet vigilantism
Region served
Ukraine
Membership
Unknown
Websitecyber-berkut.ru or cyber-berkut.org

CyberBerkut (Russian: КиберБеркут, Ukrainian: КіберБеркут) is a modern organized group of pro-Russian hacktivists.[1] The group became locally known for a series of publicity stunts and distributed denial-of-service (DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites.[2] By 2018, this group was accused by western intelligence agencies, such as National Cyber Security Centre (United Kingdom) of being linked to the GRU, providing plausible deniability.[3]

Background

The group emerged after the dissolution of special police force "Berkut" that became notorious for its violent repression used during the EuroMaidan demonstrations.[4] The group is anonymous. Their proclaimed goals are fighting against neo-fascism, neo-nationalism and arbitrary power in Ukraine.{{Citation needed|date=January 2015} tivists targeted the "Right Sector" IT resources.[citation needed] CyberBerkut targets included [[NAT

Activity

  • Attacks on NATO websites.[5][6]
  • Attacks on U.S. private military companies.[7]
  • Publication of correspondence of deputies of (political parties) Batkivshchyna and Ukrainian Democratic Alliance for Reform.[8]
  • Publication of correspondence with the United States Embassy in Ukraine and United States foundations.[9]
  • Disclosure to public of telephone recording between Yulia Tymoshenko and Nestor Shufrych.[10][nb 1]
  • Disclosure to public of telephone recording between EU High Representative for Foreign Affairs Catherine Ashton and Foreign Minister of Estonia Urmas Paet.[12]
  • Blocking cellular phones of members of the Yatsenyuk Government and persons close to them.[13]
  • Blocking Internet resources of Secretary of the National Security and Defence Council of Ukraine Andriy Parubiy and news portals: LigaBusinessInform and Ukrainian Independent Information Agency.[14]
  • Publication of video materials that are blocked on YouTube.[1]
  • Attempted destruction of the electronic system of the Central Election Commission of Ukraine prior to the 2014 Ukrainian presidential election.[citation needed]
  • Publishing lists of alleged Ukrainian military deserters[citation needed]
  • Attempts at disrupting the work of the Central Election Commission of Ukraine by damaging the IFES system before the elections and blocking cellphones of their organisators.[15][16]
  • Temporary disruption of the websites of the Ministry of Internal Affairs and the General Prosecutor of Ukraine. Websites of TV channels 1+1 and Inter were also temporary disrupted .
  • Email hacking and publication of the conversation between Ihor Kolomoyskyi and the persecutor of the Lviv Oblast, hacking of the computer and email of a person related to Ihor Kolomoyskiy.[17][18][19] Archives of the contents of 89 email accounts of Lviv oblast's prosecutor office employees.
  • Hacking and publishing of the Minister of Internal Affairs Arsen Avakov's conversation.[20]
  • Blocking of the website of the President of Ukraine Petro Poroshenko on 29 June 2014.[21]
  • Publication of the real name and biography of Semen Semenchenko – Konstantin Grishin.[22]
  • Hacking of the German Chancellery and the German Bundestag[23][24]
  • Hacked U.S. Senator John McCain's computers during a visit to Ukraine in 2015 and released a video depicting a fake ISIS beheading video being filmed[25]

The group also publishes pro-Donetsk People's Republic videos.[1] In one of them it is claimed that Ukrainian security forces are living under a "Jewish occupation".[1]

Response

  • Repeated blocking of CB's Facebook pages, although new ones have been made on the following day .
  • Arrests of people suspected in relation to CyberBerkut.[26]

See also

Notes

  1. Tymoshenko claimed that the recording had been deliberately edited to discredit her.[11]

References

  1. 1.0 1.1 1.2 1.3 Inside a pro-Russia propaganda machine in Ukraine, BBC News (13 November 2017)
  2. "Ukraine conflict: Hackers take sides in virtual war" (in en-GB). BBC News. 2014-12-20. https://www.bbc.com/news/world-europe-30453069. 
  3. Sherman, Justin. "Russia's Cyber Threat to Ukraine Is Vast—and Underestimated" (in en-US). Wired. ISSN 1059-1028. https://www.wired.com/story/russias-cyber-threat-to-ukraine-is-vast-and-underestimated/. Retrieved 2022-06-06. 
  4. Ukraine's Berkut police: What makes them special?, BBC News (25 February 2014)
  5. "NATO websites targeted in attack claimed by Ukrainian hacker group Cyber Berkut". ABC News. 16 March 2014. http://www.abc.net.au/news/2014-03-16/nato-websites-targeted-in-attack-claimed-by-ukrainian-hackers/5324362. 
  6. jenny. "Ukrainian Hacker Group CyberBerkut Launched a DDoS-attack on NATO". revolution-news.com. http://revolution-news.com/ukrainian-hacker-group-cyberberkut-launched-ddos-attack-nato/. 
  7. "CyberBerkut takes vengeance on American private military com". Pastebin. http://pastebin.com/5vv7HK8K. 
  8. "Anonymous Ukraine Claims to hack and leak secret email conversations of Vitali Klitschko's UDAR party". HackRead. 13 February 2014. http://hackread.com/anonymous-ukraine-hacks-leaks-udar-email/. 
  9. Jeffrey Carr. "Digital Dao". http://jeffreycarr.blogspot.com/2014/03/cyber-berkut-and-anonymous-ukraine-co.html. 
  10. "Телефонный разговор между Шуфричем и Тимошенко. 18 марта 2014 года в 23:17 по украинскому времени". YouTube. 24 March 2014. https://www.youtube.com/watch?v=oEFCmJ-VGhA. 
  11. "Tymoshenko admits speaking to Shufrych, says her words about Russians were edited". Interfax-Ukraine. http://en.interfax.com.ua/news/general/197607.html. 
  12. Piret Pernik: teine taktika, sama strateegia (in Estonian)
  13. Eduard Kovacs (17 March 2014). "Three NATO Websites Disrupted by Ukrainian Hackers of Cyber Berkut". softpedia. http://news.softpedia.com/news/Three-NATO-Websites-Disrupted-by-Ukrainian-Hackers-of-Cyber-Berkut-432419.shtml. 
  14. NATO websites hit in cyber attack linked to Crimea tension.
  15. "На сайте проводят регламентные работы технического характера в преддверии дня выборов. Такие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить работоспособность сайта и увеличить его скорость", — сообщил РИА Новости пресс-секретарь комиссии Константин Хивренко.
  16. "CNews: Õàêåðû çàÿâèëè îá óíè÷òîæåíèè ÈÒ-ñèñòåìû ÖÈÊ Óêðàèíû çà 2 äíÿ äî âûáîðîâ ïðåçèäåíòà". CNews.ru. http://www.cnews.ru/top/2014/05/23/hakery_zayavili_ob_unichtozhenii_itsistemy_cik_ukrainy_za_2_dnya_do_vyborov_prezidenta_573024. 
  17. ""КиберБеркут": Коломойский спонсировал части Нацгвардии на юго-востоке". 25 May 2014. http://ria.ru/world/20140525/1009264501.html. 
  18. ""Life.ru" — информационный портал". http://lifenews.ru/news/133816. 
  19. "КиберБеркут утверждает: на Украине готовится военный переворот". http://www.vesti.ru/doc.html?id=1529212&cid=520. 
  20. правды», Дарья ИВАШКИНА | Сайт «Комсомольской (22 April 2014). "Хакеры заявили, что взломали переписку Авакова об убийстве Сашко Билого". kp.ru -. http://www.kp.ru/daily/26222/3105944/. 
  21. "ТАСС: Международная панорама - Организация "Киберберкут" заблокировала сайт президента Украины". ТАСС. http://itar-tass.com/mezhdunarodnaya-panorama/1347229. 
  22. "Хакеры узнали настоящее имя командира батальона "Донбасс"". Вести.ру. 30 July 2014. http://www.vesti.ru/doc.html?id=1852258&cid=9. 
  23. Cyber-Angriff auf Kanzleramt und Bundestag, Die Welt, 7 January 2015.
  24. Wagstyl, Stefan (7 January 2015). "Ukraine separatists claim cyber attack on German government sites". Financial Times. https://www.ft.com/content/08270324-9678-11e4-a40b-00144feabdc0. 
  25. "McCain: Russian Internet trolls say I staged ISIS executions". 13 July 2015. https://www.jpost.com/not-just-news/mccain-russian-internet-trolls-say-i-staged-isis-executions-408830. 
  26. "СБУ задержала организацию хакеров "Киберберкут" - за попытку срыва выборов президента". finance.ua. http://news.finance.ua/ru/~/1/0/all/2014/05/25/326517.