According to a report from the Telegram channel, Dozor, a Russian telecommunications company that offers services to power grids, oil fields, the Russian military, and the Federal Security Service (FSB), has been hacked.
The post that the unknown threat actors posted on the telegram group translated that they had taken down satellite terminals, rebooted switches, and the data on these servers were destroyed in the attack conducted by the threat actors.
.png "Russian Defense satellite communications provider Hacked 1")
Wagner Group Behind the Attack
Wagner is a Russian mercenary group founded and led by Yevgeny Prigozhin. The group made headlines when they marched toward Moscow after Prigozhin got into issues with the Russian Government.
The group also releases ransomware that doesn’t ask for money but encourages users to join PMC Wagner.
It appears that the same hacker group responsible for the Dozor hack also defaced several unrelated websites, leaving a message in support of the Wagner group.
According to Doug Madory, the person in charge of internet analysis at Kentik (a network monitoring company), Dozor-Teleport has been disconnected from the internet and is presently inaccessible.
As per the IODA project that monitors internet outages globally, the network has been offline since Wednesday at 10 p.m. EST.
Netblocks also confirmed the outage.
The attackers also warned that more threatening activities were to come.
The defaced website states, “We agreed to a peaceful solution because we achieved the main thing — we showed our capabilities and full social approval of our actions. But what do we see instead? The current military leadership has not been removed from office, and criminal cases have not been closed … You kicked us out of the NWO zone, out of Russia, but you can’t kick us out of the network. We take responsibility for the hacking. This is just the beginning, more to come.“
FSB, Dozor and the ZIP file
Furthermore, the group posted a .zip file that contained 674 files of PDFs, images, and documents relating to the connections between the FSB and the Dozor.
To prove the authenticity of the attack, the group also posted the passwords that Dozor employees used for verifying with the FSB representatives, which changes every two months in 2023.
As per reports, Dozor’s internet connection went down at 2 UTC on Wednesday and still remains unreachable.
After this, the company switched to Amtel-Svyaz, the Moscow-based parent company of Dozor.
Cyber policy expert and Consultant. Oleg Shakirov mentioned that there is some suspicion against Wagner’s involvement in this as there is no history of such attacks with the Wagner group.
“AI-based email security measures Protect your business From Email Threats!” – Request a Free Demo.