Cyberattack on Ukraine’s state registers disrupts marriage registration, real estate deals

Category	Details
Threat Actors	Pro-Russian hacker group XakNet (suspected ties to GRU); potentially Sandworm group.
Campaign Overview	Large-scale cyberattack disrupted Ukraine’s state registers, affecting essential services such as marriage registration, real estate transactions, and digital record access.
Target Regions	Ukraine.
Methodology	Likely initial access through phishing emails or insider threat (employee bribery); systematic, well-planned attack to delete primary and backup databases.
Products Targeted	State databases for births, marriages, deaths, real estate, legal entities, property rights, and military draft deferment systems.
Malware Reference	Not explicitly mentioned; details of specific malware not disclosed.
Tools Used	Cyberattack methods possibly involving phishing and database deletion; systematic organization with advanced tactics.
Vulnerabilities Exploited	Potential exploitation of human factors (phishing, insider threats).
TTPs	Use of phishing emails; insider bribery; database deletion; targeting critical infrastructure; use of backups stored in external servers (e.g., Poland).
Attribution	Likely Russian state-linked actors; GRU-associated groups such as Sandworm suspected.
Recommendations	Strengthen database security, improve phishing awareness training, secure backups off-network, enhance insider threat monitoring, and deploy robust incident response plans.
Source	The Record

Read full article: https://therecord.media/cyberattack-on-ukraine-state-register-disrupts-real-estate-marriages

The above summary has been generated by an AI language model