Misplaced Pages

CyberBerkut: Difference between revisions

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 02:47, 12 January 2015 editVsmith (talk | contribs)Administrators271,524 edits Reverted to revision 641693802 by BG19bot (talk): WP:Block evasion. (TW)← Previous edit Latest revision as of 01:45, 24 October 2024 edit undoMonkbot (talk | contribs)Bots3,695,952 editsm Task 20: replace {lang-??} templates with {langx|??} ‹See Tfd› (Replaced 2);Tag: AWB 
(80 intermediate revisions by 58 users not shown)
Line 1: Line 1:
{{Short description|Group of pro-Russian hackers}}
{{refimprove|date=July 2014}} {{more citations needed|date=July 2014}}
{{Infobox organization {{Infobox organization
|name = CyberBerkut |name = CyberBerkut
|bgcolor = lightblue
|image = CyberBerkut.png |image = CyberBerkut.png
|size = 200px |size = 200px
|alt = CB |alt = CB
|caption = resembles emblem of special police unit "]" |caption = resembles emblem of special police unit "]"
|map = |map =
|msize = |msize =
|malt = |malt =
|mcaption = |mcaption =
|formation = c. 2014 |formation = c. 2014
|type = ];{{-}}] |type = ];{{-}}]
Line 16: Line 16:
|region_served = ] |region_served = ]
|membership = Unknown |membership = Unknown
⚫ |website = {{url|cyber-berkut.ru}} or {{url|cyber-berkut.org}}
|slogan = We will not forget! We will not forgive!{{#tag:ref|{{lang-ru|Мы не забудем! Мы не простим!}}|group=nb}}
⚫ |website = http://www.cyber-berkut.net/
}} }}


'''CyberBerkut''' ({{lang-ru|КиберБеркут}}, {{lang-uk|КіберБеркут}}) — is a modern organized group of pro-Russian ] {{Citation needed|date=January 2015}}. The group became locally known for a series of publicity stunts and ] (DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites {{Citation needed|date=January 2015}}. '''CyberBerkut''' ({{langx|ru|КиберБеркут}}, {{langx|uk|КіберБеркут}}) is a modern organized group of pro-Russian ].<ref name="BBCtrending41915295">, ] (13 November 2017)</ref> The group became locally known for a series of publicity stunts and ] (DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites.<ref>{{Cite news|date=2014-12-20|title=Ukraine conflict: Hackers take sides in virtual war|language=en-GB|work=BBC News|url=https://www.bbc.com/news/world-europe-30453069|access-date=2020-10-20}}</ref> By 2018, this group was accused by western intelligence agencies, such as ] of being linked to the ], providing plausible deniability.<ref>{{Cite magazine |last=Sherman |first=Justin |title=Russia's Cyber Threat to Ukraine Is Vast—and Underestimated |language=en-US |magazine=Wired |url=https://www.wired.com/story/russias-cyber-threat-to-ukraine-is-vast-and-underestimated/ |access-date=2022-06-06 |issn=1059-1028}}</ref>


== Background == == Background ==
⚫ The group emerged after the dissolution of ] that became notorious for its violent repression used during the ] demonstrations.<ref>, ] (25 February 2014)</ref> The group is anonymous.{{Citation needed|date=January 2015}} Their proclaimed goals are fighting against ], ] and ] in ].{{Citation needed|date=January 2015}} To further this aim, CyberBerkut activists targeted the "]" IT resources.{{Citation needed|date=January 2015}} CyberBerkut targets included ], and its allies.<ref name="FT"/>

⚫ The group emerged after the dissolution of ] that came as a consequence of the violent repression used during the ] demonstrations {{Citation needed|date=January 2015}}. Composition is not known, for obvious reasons members of the community tend to remain ], one of many groups visible only in ] {{Citation needed|date=January 2015}}. Their proclaimed goals are fighting against ], ] and ] in ] {{Citation needed|date=January 2015}}. To further this aim, CyberBerkut activists targeted the “]” IT resources {{Citation needed|date=January 2015}}. CyberBerkut's symbols resemble that of the "]" group {{Citation needed|date=January 2015}}. The prefix "cyber" probably alludes to working in the ] (the ]) {{Citation needed|date=January 2015}}.
In fact cyberBerkut only attacks NATO and Nato allies targets.<ref>(http://www.ft.com/cms/s/0/08270324-9678-11e4-a40b-00144feabdc0.html#axzz3OEH9n5sq)</ref> Like Ukraine anonymous which had no link with the anonymous, CyberBerkut seems to be an active branch of the FSB, acting for the desinformation.


== Activity == == Activity ==
* Attacks on ] websites.<ref></ref><ref></ref><ref></ref> * Attacks on ] websites.<ref>{{cite news|url=http://www.abc.net.au/news/2014-03-16/nato-websites-targeted-in-attack-claimed-by-ukrainian-hackers/5324362|title=NATO websites targeted in attack claimed by Ukrainian hacker group Cyber Berkut|work=ABC News|date=16 March 2014|access-date=18 February 2015}}</ref><ref>{{cite web|url=http://revolution-news.com/ukrainian-hacker-group-cyberberkut-launched-ddos-attack-nato/|title=Ukrainian Hacker Group CyberBerkut Launched a DDoS-attack on NATO|author=jenny|work=revolution-news.com|access-date=18 February 2015|url-status=dead|archive-url=https://web.archive.org/web/20150224122154/http://revolution-news.com/ukrainian-hacker-group-cyberberkut-launched-ddos-attack-nato/|archive-date=24 February 2015}}</ref>
* Attacks on U.S. private military companies.<ref></ref> * Attacks on U.S. private military companies.<ref>{{cite web|url=http://pastebin.com/5vv7HK8K|title=CyberBerkut takes vengeance on American private military com|work=Pastebin|access-date=18 February 2015}}</ref>
* Publication of correspondence of deputies of (political parties) ] and ].<ref></ref> * Publication of correspondence of deputies of (political parties) ] and ].<ref>{{cite web|url=http://hackread.com/anonymous-ukraine-hacks-leaks-udar-email/|title=Anonymous Ukraine Claims to hack and leak secret email conversations of Vitali Klitschko's UDAR party|work=HackRead|date=13 February 2014|access-date=18 February 2015}}</ref>
* Publication of correspondence with the ] and United States ].<ref></ref> * Publication of correspondence with the ] and United States ].<ref>{{cite web|url=http://jeffreycarr.blogspot.com/2014/03/cyber-berkut-and-anonymous-ukraine-co.html|title=Digital Dao|author=Jeffrey Carr|access-date=18 February 2015}}</ref>
* Disclosure to public of telephone recording between ] and ].<ref>https://www.youtube.com/watch?v=oEFCmJ-VGhA</ref>{{#tag:ref|Tymoshenko claimed that the recording had been deliberately edited to discredit her.<ref></ref>|group=nb}} * Disclosure to public of telephone recording between ] and ].<ref>{{cite web|url=https://www.youtube.com/watch?v=oEFCmJ-VGhA|title=Телефонный разговор между Шуфричем и Тимошенко. 18 марта 2014 года в 23:17 по украинскому времени|date=24 March 2014|work=YouTube|access-date=18 February 2015}}</ref>{{#tag:ref|Tymoshenko claimed that the recording had been deliberately edited to discredit her.<ref>{{cite web|url=http://en.interfax.com.ua/news/general/197607.html|title=Tymoshenko admits speaking to Shufrych, says her words about Russians were edited|publisher=Interfax-Ukraine|access-date=18 February 2015}}</ref>|group=nb}}
* Disclosure to public of telephone recording between ] ] and ] of ] ].<ref> {{Et icon}}</ref> * Disclosure to public of telephone recording between ] ] and ] of ] ].<ref> {{in lang|et}}</ref>
* Blocking ]s of members of the ] and persons close to them.<ref></ref> * Blocking ]s of members of the ] and persons close to them.<ref>{{cite web|url=http://news.softpedia.com/news/Three-NATO-Websites-Disrupted-by-Ukrainian-Hackers-of-Cyber-Berkut-432419.shtml|title=Three NATO Websites Disrupted by Ukrainian Hackers of Cyber Berkut|author=Eduard Kovacs|date=17 March 2014|work=softpedia|access-date=18 February 2015}}</ref>
* Blocking Internet resources of Secretary of the ] ] and news portals: LigaBusinessInform and ].<ref>.</ref> * Blocking Internet resources of Secretary of the ] ] and news portals: LigaBusinessInform and ].<ref>.</ref>
* Publication of video materials that are blocked on ] {{Citation needed|date=January 2015}}. * Publication of video materials that are blocked on ].<ref name="BBCtrending41915295"/>
* Attempts at disrupting the recruitment of the ] {{Citation needed|date=January 2015}}. * Attempts at disrupting the recruitment of the ].{{Citation needed|date=January 2015}}
* Attempted destruction of the electronic system of the ] prior to the ].<ref>{{cite news|title=CyberBerkut announces destruction of electronic system of Ukraine's Central Election Commission|url=http://voiceofrussia.com/news/2014_05_23/CyberBerkut-announces-destruction-of-electronic-system-of-Ukraines-Central-Election-Commission-5809/|newspaper=Voice of Russia}}</ref> * Attempted destruction of the electronic system of the ] prior to the ].{{cn|date=May 2023}}
* Publishing lists of alleged Ukrainian military deserters <ref>{{cite news|title=КиберБеркут: Украинские солдаты массово дезертируют из армии|url=http://russian.rt.com/article/42690|accessdate=27 July 2014|work=RT Online|date=27 July 2014}}</ref> * Publishing lists of alleged Ukrainian military deserters{{cn|date=December 2020}}
* Attempts at disrupting the work of the ] by damaging the IFES system before the elections and blocking cellphones of their organisators.<ref>"На сайте проводят регламентные работы технического характера в преддверии дня выборов. Такие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить работоспособность сайта и увеличить его скорость", — сообщил ] ] комиссии Константин Хивренко.</ref><ref></ref> * Attempts at disrupting the work of the ] by damaging the IFES system before the elections and blocking cellphones of their organisators.<ref>"На сайте проводят регламентные работы технического характера в преддверии дня выборов. Такие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить работоспособность сайта и увеличить его скорость", — сообщил ] ] комиссии Константин Хивренко.</ref><ref>{{cite web|url=http://www.cnews.ru/top/2014/05/23/hakery_zayavili_ob_unichtozhenii_itsistemy_cik_ukrainy_za_2_dnya_do_vyborov_prezidenta_573024|title=CNews: Õàêåðû çàÿâèëè îá óíè÷òîæåíèè ÈÒ-ñèñòåìû ÖÈÊ Óêðàèíû çà 2 äíÿ äî âûáîðîâ ïðåçèäåíòà|work=CNews.ru|access-date=18 February 2015}}</ref>
* Temporary disruption of the websites of the ] and the ]. Websites of TV channels ] and ] were also temporary disrupted {{Citation needed|date=January 2015}}. * Temporary disruption of the websites of the ] and the ]. Websites of TV channels ] and ] were also temporary disrupted {{Citation needed|date=January 2015}}.
* Email hacking and publication of the conversation between ] and the persecutor of the ], hacking of the computer and email of a person related to Ihor Kolomoyskiy.<ref></ref><ref></ref><ref></ref> Archives of the contents of 89 email accounts of Lviv oblast's prosecutor office employees. * Email hacking and publication of the conversation between ] and the persecutor of the ], hacking of the computer and email of a person related to Ihor Kolomoyskiy.<ref>{{cite web|url=http://ria.ru/world/20140525/1009264501.html|title="КиберБеркут": Коломойский спонсировал части Нацгвардии на юго-востоке|date=25 May 2014|access-date=2 August 2017}}</ref><ref>{{cite web|url=http://lifenews.ru/news/133816|title="Life.ru" — информационный портал|website=Life.ru|access-date=2 August 2017}}</ref><ref>{{cite web|url=http://www.vesti.ru/doc.html?id=1529212&cid=520|title=КиберБеркут утверждает: на Украине готовится военный переворот|access-date=2 August 2017}}</ref> Archives of the contents of 89 email accounts of Lviv oblast's prosecutor office employees.
* Hacking and publishing of the Minister of Internal Affairs ]'s conversation.<ref></ref> * Hacking and publishing of the Minister of Internal Affairs ]'s conversation.<ref>{{cite web|url=http://www.kp.ru/daily/26222/3105944/|title=Хакеры заявили, что взломали переписку Авакова об убийстве Сашко Билого|first=Дарья ИВАШКИНА &#124; Сайт «Комсомольской |last=правды» |date=22 April 2014 |access-date=2 August 2017}}</ref>
* Blocking of the website of the President of Ukraine ] on June 29, 2014.<ref></ref> * Blocking of the website of the President of Ukraine ] on 29 June 2014.<ref>{{cite web|url=http://itar-tass.com/mezhdunarodnaya-panorama/1347229|title=ТАСС: Международная панорама - Организация "Киберберкут" заблокировала сайт президента Украины|work=ТАСС|access-date=18 February 2015}}</ref>
* Publication of the real name and biography of ] - Konstantin Grishin.<ref>{{cite web|url=http://www.vesti.ru/doc.html?id=1852258&cid=9|title=Хакеры узнали настоящее имя командира батальона "Донбасс"|author=|date=2014-07-30|work=|publisher=]}}</ref> * Publication of the real name and biography of ] – Konstantin Grishin.<ref>{{cite web|url=http://www.vesti.ru/doc.html?id=1852258&cid=9|title=Хакеры узнали настоящее имя командира батальона "Донбасс"|date=30 July 2014 |publisher=]}}</ref>
⚫ *Hacking of the ] and the German ]<ref>, ], 7 January 2015.</ref><ref name="FT">{{cite news|last1=Wagstyl|first1=Stefan|title=Ukraine separatists claim cyber attack on German government sites|url=https://www.ft.com/content/08270324-9678-11e4-a40b-00144feabdc0|work=Financial Times|date=7 January 2015}}</ref>
* Hacking of commercial billboards in ] and broadcasting footage over them with the accusal of some candidates in the ] as ]s.<ref></ref>
*Hacked U.S. Senator ]'s computers during a visit to Ukraine in 2015 and released a video depicting a fake ISIS beheading video being filmed<ref>{{cite web|url=https://www.jpost.com/not-just-news/mccain-russian-internet-trolls-say-i-staged-isis-executions-408830|title=McCain: Russian Internet trolls say I staged ISIS executions|date=13 July 2015 |access-date=10 June 2024}}</ref>
⚫ *Hacking ot the ] and the German ]<ref>, ], January 7th, 2015</ref>

The group also publishes pro-] videos.<ref name="BBCtrending41915295"/> In one of them it is claimed that ] are living under a "] occupation".<ref name="BBCtrending41915295"/>


== Response == == Response ==
* Repeated blocking of CB's ] pages, although new ones have been made on the following day {{Citation needed|date=January 2015}}. * Repeated blocking of CB's ] pages, although new ones have been made on the following day {{Citation needed|date=January 2015}}.
* Likely in response to attacking the websites of ] and ], CyberBerkut's websites have been temporarily disrupted. The websites started to work again on the following day {{Citation needed|date=January 2015}}. * Likely in response to attacking the websites of ] and ], CyberBerkut's websites have been temporarily disrupted. The websites started to work again on the following day.{{Citation needed|date=January 2015}}
* Arrests of people suspected in relation to CyberBerkut.<ref></ref> * Arrests of people suspected in relation to CyberBerkut.<ref>{{cite web|url=http://news.finance.ua/ru/~/1/0/all/2014/05/25/326517|title=СБУ задержала организацию хакеров "Киберберкут" - за попытку срыва выборов президента|publisher=finance.ua|access-date=18 February 2015|archive-date=27 May 2014|archive-url=https://web.archive.org/web/20140527220239/http://news.finance.ua/ru/~/1/0/all/2014/05/25/326517|url-status=dead}}</ref>


== See also == == See also ==
Line 59: Line 58:
* ] * ]
* ] * ]
* ]
* ] * ]


==Notes== == Notes ==
{{Reflist|group=nb}} {{Reflist|group=nb}}


Line 68: Line 68:


== External links == == External links ==
* *
* {{facebook|cyberberkut3}} * {{facebook|cyberberkut3}}
* {{twitter|CyberBerkut}} * {{Twitter}}


{{Hacking in the 2010s}} {{Hacking in the 2010s}}
Line 81: Line 81:
] ]
] ]
⚫ ]
] ]
] ]
] ]
]

]

]
{{internet-stub}}
⚫ ]

Latest revision as of 01:45, 24 October 2024

Group of pro-Russian hackers
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.
Find sources: "CyberBerkut" – news · newspapers · books · scholar · JSTOR (July 2014) (Learn how and when to remove this message)
CyberBerkut
CBresembles emblem of special police unit "Berkut"
Formationc. 2014
TypeVirtual community;Voluntary association
PurposeInternet activism;Internet vigilantism
Region served Ukraine
MembershipUnknown
Websitecyber-berkut.ru or cyber-berkut.org

CyberBerkut (Russian: КиберБеркут, Ukrainian: КіберБеркут) is a modern organized group of pro-Russian hacktivists. The group became locally known for a series of publicity stunts and distributed denial-of-service (DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites. By 2018, this group was accused by western intelligence agencies, such as National Cyber Security Centre (United Kingdom) of being linked to the GRU, providing plausible deniability.

Background

The group emerged after the dissolution of special police force "Berkut" that became notorious for its violent repression used during the EuroMaidan demonstrations. The group is anonymous. Their proclaimed goals are fighting against neo-fascism, neo-nationalism and arbitrary power in Ukraine. To further this aim, CyberBerkut activists targeted the "Right Sector" IT resources. CyberBerkut targets included NATO, and its allies.

Activity

The group also publishes pro-Donetsk People's Republic videos. In one of them it is claimed that Ukrainian security forces are living under a "Jewish occupation".

Response

  • Repeated blocking of CB's Facebook pages, although new ones have been made on the following day .
  • Likely in response to attacking the websites of Greystone Limited and Triple Canopy, CyberBerkut's websites have been temporarily disrupted. The websites started to work again on the following day.
  • Arrests of people suspected in relation to CyberBerkut.

See also

Notes

  1. Tymoshenko claimed that the recording had been deliberately edited to discredit her.

References

  1. ^ Inside a pro-Russia propaganda machine in Ukraine, BBC News (13 November 2017)
  2. "Ukraine conflict: Hackers take sides in virtual war". BBC News. 2014-12-20. Retrieved 2020-10-20.
  3. Sherman, Justin. "Russia's Cyber Threat to Ukraine Is Vast—and Underestimated". Wired. ISSN 1059-1028. Retrieved 2022-06-06.
  4. Ukraine's Berkut police: What makes them special?, BBC News (25 February 2014)
  5. ^ Wagstyl, Stefan (7 January 2015). "Ukraine separatists claim cyber attack on German government sites". Financial Times.
  6. "NATO websites targeted in attack claimed by Ukrainian hacker group Cyber Berkut". ABC News. 16 March 2014. Retrieved 18 February 2015.
  7. jenny. "Ukrainian Hacker Group CyberBerkut Launched a DDoS-attack on NATO". revolution-news.com. Archived from the original on 24 February 2015. Retrieved 18 February 2015.
  8. "CyberBerkut takes vengeance on American private military com". Pastebin. Retrieved 18 February 2015.
  9. "Anonymous Ukraine Claims to hack and leak secret email conversations of Vitali Klitschko's UDAR party". HackRead. 13 February 2014. Retrieved 18 February 2015.
  10. Jeffrey Carr. "Digital Dao". Retrieved 18 February 2015.
  11. "Телефонный разговор между Шуфричем и Тимошенко. 18 марта 2014 года в 23:17 по украинскому времени". YouTube. 24 March 2014. Retrieved 18 February 2015.
  12. "Tymoshenko admits speaking to Shufrych, says her words about Russians were edited". Interfax-Ukraine. Retrieved 18 February 2015.
  13. Piret Pernik: teine taktika, sama strateegia (in Estonian)
  14. Eduard Kovacs (17 March 2014). "Three NATO Websites Disrupted by Ukrainian Hackers of Cyber Berkut". softpedia. Retrieved 18 February 2015.
  15. NATO websites hit in cyber attack linked to Crimea tension.
  16. "На сайте проводят регламентные работы технического характера в преддверии дня выборов. Такие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить работоспособность сайта и увеличить его скорость", — сообщил РИА Новости пресс-секретарь комиссии Константин Хивренко.
  17. "CNews: Õàêåðû çàÿâèëè îá óíè÷òîæåíèè ÈÒ-ñèñòåìû ÖÈÊ Óêðàèíû çà 2 äíÿ äî âûáîðîâ ïðåçèäåíòà". CNews.ru. Retrieved 18 February 2015.
  18. ""КиберБеркут": Коломойский спонсировал части Нацгвардии на юго-востоке". 25 May 2014. Retrieved 2 August 2017.
  19. ""Life.ru" — информационный портал". Life.ru. Retrieved 2 August 2017.
  20. "КиберБеркут утверждает: на Украине готовится военный переворот". Retrieved 2 August 2017.
  21. правды», Дарья ИВАШКИНА | Сайт «Комсомольской (22 April 2014). "Хакеры заявили, что взломали переписку Авакова об убийстве Сашко Билого". Retrieved 2 August 2017.{{cite web}}: CS1 maint: multiple names: authors list (link) CS1 maint: numeric names: authors list (link)
  22. "ТАСС: Международная панорама - Организация "Киберберкут" заблокировала сайт президента Украины". ТАСС. Retrieved 18 February 2015.
  23. "Хакеры узнали настоящее имя командира батальона "Донбасс"". Вести.ру. 30 July 2014.
  24. Cyber-Angriff auf Kanzleramt und Bundestag, Die Welt, 7 January 2015.
  25. "McCain: Russian Internet trolls say I staged ISIS executions". 13 July 2015. Retrieved 10 June 2024.
  26. "СБУ задержала организацию хакеров "Киберберкут" - за попытку срыва выборов президента". finance.ua. Archived from the original on 27 May 2014. Retrieved 18 February 2015.

External links

Hacking in the 2010s
← 2000s Timeline 2020s →
Major incidents
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
Hacktivism
Advanced
persistent threats
Individuals
Major vulnerabilities
publicly disclosed
Malware
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
Categories: