Hackers Deface Ukrainian Government Websites Following “Dead End” Talks

Talks between the US, Ukraine, and Russia ended on a dead-end Thursday, with Russia threatening action after NATO continues to include Ukraine as a member. Following the announcement of the talks, hackers took action themselves by defacing multiple Ukrainian Government websites. The Ministry of Foreign Affairs, Education and Science, and Cabinet of Ministers as well as the State Emergency Service were completely taken down after the defacement, around fifteen (15) websites in total. The message stated that personal data was “sent to a public network” and all of the data on the computers was destroyed. These claims have not been substantiated by any official sources and are likely just attempts to scare the public. Following the attack, journalist Kim Zetter obtained information from the Ukrainian government that confirmed the attackers leveraged a vulnerability in the October Content Management System disclosed in August 2021, CVE-2021-32648. Currently the attack seems to be contained to just a defacement and denial of service, as no data has been leaked. CTIX analysts are monitoring the situation and will update if any new information arises.