Ukraine’s Intelligence Agency Unleashes Cyberattack on Russia’s Financial and Government Systems

On July 31, 2024, the Main Intelligence Directorate (HUR) of Ukraine’s Ministry of Defense concluded one of the largest DDoS attacks in history against Russia’s internet infrastructure. The attack, which lasted for a week, targeted critical online services including banking institutions, payment systems, telecommunications providers, social networks, and government resources.

Among the targeted institutions were VTB Bank, Alfa Bank, Sberbank, Raiffeisen Bank, RSHB Bank, Gazprombank, and the Central Bank of Russia. Additionally, on the final day of the attack, resources of the Russian Ministry of Defense, Ministry of Internal Affairs (MVD), and Federal Tax Service (FTS) were also affected.

Sources within the intelligence services reported that by the end of the attack, Russians had not managed to restore the normal functioning of many banking and payment systems, social networks, mobile operators, and internet providers. Some systems, including government resources, are still experiencing disruptions.

Russian media described the cyberattack as one of the most powerful in history, noting that it caused significant difficulties for millions of users across all regions of Russia.

This is not the first cyberattack carried out by Ukrainian hackers on Russian infrastructure. Earlier, on July 27, an attack resulted in users of Russian banks being unable to withdraw cash from ATMs due to card blocking. In June 2024, Ukrainian hackers also targeted the networks of Russian providers, leaving over 250,000 subscribers, including in occupied Crimea, without connectivity.

Andriy Yusov, a representative of the HUR, confirmed that cyberattacks on Russian infrastructure will continue. “There will be more to come. Indeed, we observed a week of massive attacks on the enemy’s military digital infrastructure. It is important to understand that this involves the financial sector as well as other cyber sectors of the adversary involved in financing and supporting the genocidal war against Ukrainians,” he said.

Yusov also emphasized that the attacks aim to destroy critical data and equipment of Russian companies that support military actions against Ukraine.