DIU cyber experts target Gazprom infrastructure

This was reported to Ukrinform by a source in the Main Intelligence Directorate.

According to the source, the cyberattack caused significant damage to the network infrastructure of the Russian gas monopoly, including the destruction of a large amount of databases and the installation of special software.

According to a source in the Main Intelligence Directorate of the Ministry of Defense, the operation resulted in the disconnection of system administrators (approximately 20,000) from Gazprom’s information system and the installation of software on Gazprom’s servers that will subsequently destroy data from Gazprom’s information system.

In addition, the following were destroyed:

• backup copies of Gazprom’s information system data;
• databases of approximately 390 Gazprom subsidiaries and affiliates, including Gazprom Teplo Energo, Gazprom Obl Energo, Gazprom Energozbit, and hundreds of others;
• data from 1C server clusters (10 extremely high-powered servers) along with all files (contracts, orders, directives) belonging to Gazprom and its subsidiaries;
• data from auxiliary systems (data protection, server control, administration, and much more);
• databases of analytics systems for pipelines, valves, sensors, pumps, and more. Servers with analytics of SCADA systems responsible for managing technical infrastructure have been deleted;
• operating systems on accessible servers and BIOS have been damaged (servers do not turn on and will require physical intervention to restore operation).

“The degradation of Russian information systems to the technological Middle Ages continues. Taking this opportunity, we congratulate Russian ‘cyber experts’ on their latest ‘achievement’ and advise them to gradually replace mice and keyboards with hammers and pliers as their main tools,” said a source from Ukrainian intelligence.

As reported, Ukrainian hackers paralyzed the work of one of the largest drone manufacturers in Russia.