Categories: Technology

This is what Ukraine’s cybersecurity chief says about Russian hacks

In an interview, the Ukrainian cybersecurity chief warns about the changing threat situation. And chatter from the sewing box.
Daniel Schurter

His name is a tongue twister for German speakers, not to mention the department he heads: Yuri Shchichol directs the Derzhspetszvyazok. But that shouldn’t stop us from listening very carefully to him.

The Ukrainian heads the State Service for Special Communications and Information Protection (SSSCIP). That means he is the top cybersecurity chief in the country.

In an interview recently published by the American medium The Record, the Ukrainian speaks relatively openly about the specific attacks and threats. Observers in the West can also learn something from this.

“Most Russian missiles target innocent civilians, and the same thing happens in cyberspace.”

A year after the invasion, his work has not become any easier. That’s an understatement: Russian hackers are constantly adapting and improving their methods as they look for new targets.

What is the interim assessment of the cyber war?

The Ukrainian says:

“Russian cyberattacks have been relatively unsuccessful over the past six months. However, this suggests that they are probably preparing for a large-scale operation in the future.”

In the past, Russian hacker groups worked independently on their own projects. However, there seems to be a greater alignment between them now. This could indicate that they are receiving instructions from the top leadership in the Kremlin.

How have cyberattacks changed since early 2023?

Yuriy Shchihol says the hackers changed their attack vectors and targets.

«In 2023, cyber-attacks against Ukraine’s commercial, financial and defense sectors have significantly decreased. The hackers may have lost interest in these areas because they cannot quickly find exploitable vulnerabilities there. Instead, they have turned their attention to other critical targets, such as the energy sector.”

Another change is an increase in attacks on the private sector supply chain, particularly against software makers. These attacks are extremely complex and require more knowledge, skills and capabilities on the part of the attacker to execute.

“We are working to strengthen cooperation with the private sector, especially software companies, which are increasingly targeted by supply chain attacks.”

If hackers infiltrate a private company, it can cause significant damage to other institutions, Shchichol recalls. That was the case in 2017 with the NotPetya malware. It paralyzed hundreds of computers in Ukrainian government agencies, banks, hospitals and airports and caused an estimated $10 billion in damage worldwide.

How has the use of Russian malware changed?

Russian hackers used to focus on using so-called “wipers” to destroy Ukrainian IT systems, the cybersecurity chief says. Now they mainly use spyware to collect information from private messengers, emails and devices.

“This shift suggests that hackers are paving the way for windshield wiper deployment. Your next move appears to be aimed at destroying infrastructure and causing more damage to Ukraine.”

How do Russian cyber attacks affect the Ukrainian military?

Shchichol confirms what seems logical: the Ukrainian army is a priority for Russian hackers. For example, they constantly tried to attack the battlefield management system “Delta”. (see box below).

“However, we have taken steps to improve protection and have worked with US and European partners to improve the architecture.”
“Delta” helps the defenders
At a NATO meeting in late 2022, before the Russian invasion, Ukraine’s Digital Affairs Minister Mikhail Fedorov said the greatest benefit lay in modern warfare full real-time battlefield information. Knowing where the enemy is and how powerful it is. And this is where “Delta” comes into play.

It is a cloud-based system for collecting, processing and displaying enemy force data and coordinating your forces. The software meets NATO standards, but goes much further in terms of functionality.

Delta was invented by volunteers from the Aerorozwidka Group, who came together in 2014 to provide innovative reconnaissance technology to the Ukrainian armed forces. The system was launched in 2016 and has since been continuously developed by the Ukrainian Ministry of Defense and the Ministry of Digital Affairs with the help of foreign allies.

According to the developers, Delta provides a real-time, three-dimensional view of the battlefield, integrating information about the Russian attackers from various sensors and sources, including intelligence data, into a digital map. It does not require any additional settings and can work on any device – a laptop, tablet or smartphone.

The view would be similar to Google Maps and any Ukrainian commander would have access to the system. And “Business Insider” said, “Breaking with the hierarchical leadership tradition of the Soviet military, the military learns in real time what is happening on land, sea, air, space and cyberspace.”

Important technical detail: The digital communication between the different units mainly takes place via satellite internet. And as is well known, Starlink from SpaceX plays a decisive role.

The Wall Street Journal noted in early 2023 that Ukraine had achieved a cheap “MacGyver” version of what took the Pentagon decades and billions of dollars to achieve.

What’s going on with the new Ukrainian messenger app?

It is known that most of the military have a smartphone to keep in touch with loved ones at home. However, certain apps pose a significant security risk.

Schchichol says:

“It is difficult to tell soldiers in the trenches which messenger to use, so use whatever is convenient. We urge you not to send coordinates or sensitive information that could endanger your life.”

The head of cybersecurity says a bug-proof Ukrainian messenger is currently being tested.

‘I use it too. We are working with partners – trusted private companies that specialize in message development – to improve its security, and we will soon be using it with certain government agencies.”

The app will initially be used by the military and government officials. If the technology proves reliable, it can be made available to the public.

How is the cooperation with abroad?

Understandably, Ukraine’s chief of cybersecurity does not comment on cooperation with the US military and foreign intelligence agencies.

Shchichol says his country has had access to cutting-edge technology from large private companies such as Microsoft, ESET and Cisco since the start of the war. “These technologies weren’t available to us before.”

“Our partners’ investments serve not only the defense of Ukraine, but also their own interests. Ukrainian specialists have valuable experience in large-scale cyber warfare unmatched by any other country.

Because our partners contribute technology, we provide expertise they didn’t have before.”

How does the controversial American company Palantir help?

In February, the CEO of the US big data company, Alex Karp, told Reuters that Palantir software helped Ukraine attack Russian tanks and artillery.

Shchichol is also coy about this:

“We are working with Palantir, but we cannot discuss this publicly. The powerful analytical capabilities [von Palantir] are incredibly useful to Ukraine, especially in terms of military management, as they provide critical information for our operations.”

What do Ukrainian IT companies contribute?

For Shchichol it is clear:

“Public-private partnerships are crucial in defending against cyber attacks. We rely on feedback from private companies to identify vulnerable systems and provide the necessary protection.”

Is Ukraine strengthening its defenses against hackers?

Yes. The Ministry of Defense is currently setting up its own CERTthe abbreviation stands for Computer Emergency Response Team. This refers to a group of IT specialists who can handle calamities.

The military CERT will complement an already existing civilian IT security team (CERT-UA), it is said.

“In my opinion, it is important that every industry, be it energy, defense or telecom, has its own SOC [Security Operations Center] has. This dedicated SOC will have the specific knowledge and expertise needed to protect systems against hackers.”

What role do non-state hackers play?

The Ukrainian cybersecurity chief said:

“In Russia there are no equivalents to what we understand by hacktivists – independent hackers who act as they see fit. Instead, Russian hackers are somewhat controlled by the secret services, military and politicians. Their main goal is to undermine and destabilize Ukraine.

We collect evidence of all crimes committed by Russians, including in cyberspace, and we actively advocate for cybercrime to be recognized as war crimes.”

Shchichol says hackers should also be considered war criminals if they carry out attacks that kill innocent civilians. “We expect them to be held accountable for all the crimes they committed in Ukraine.”

Sources

  • therecord.media: Ukraine’s cyber chief on the ever-evolving digital war with Russia (May 21, 2023)
  • wsj.com: Ukraine has digitized its armed forces on a shoestring budget
  • mezha.media: The unique Ukrainian situational awareness system Delta was presented at the annual NATO event (October 2022)
  • en.wikipedia.org: Special State Communication Service of Ukraine

Daniel Schurter

Source: Watson

Share
Published by
Ella

Recent Posts

Terror suspect Chechen ‘hanged himself’ in Russian custody Egyptian President al-Sisi has been sworn in for a third term

On the same day of the terrorist attack on the Krokus City Hall in Moscow,…

1 year ago

Locals demand tourist tax for Tenerife: “Like a cancer consuming the island”

class="sc-cffd1e67-0 iQNQmc">1/4Residents of Tenerife have had enough of noisy and dirty tourists.It's too loud, the…

1 year ago

Agreement reached: this is how much Tuchel will receive for his departure from Bayern

class="sc-cffd1e67-0 iQNQmc">1/7Packing his things in Munich in the summer: Thomas Tuchel.After just over a year,…

1 year ago

Worst earthquake in 25 years in Taiwan +++ Number of deaths increased Is Russia running out of tanks? Now ‘Chinese coffins’ are used

At least seven people have been killed and 57 injured in severe earthquakes in the…

1 year ago

Now the moon should also have its own time (and its own clocks). These 11 photos and videos show just how intense the Taiwan earthquake was

The American space agency NASA would establish a uniform lunar time on behalf of the…

1 year ago

This is how the Swiss experienced the earthquake in Taiwan: “I saw a crack in the wall”

class="sc-cffd1e67-0 iQNQmc">1/8Bode Obwegeser was surprised by the earthquake while he was sleeping. “It was a…

1 year ago