Microsoft has announced that it has stopped some cyberattacks of a hacker group linked to Russian intelligence that had targeted Ukraine: the group is called Strontium and is known in the cybercrime environment, also for having tried to infiltrate the servers of the Democratic party American in 2016.
The Redmond company explained that “on April 6 we got the green light from the court to intervene on 7 domains on the Internet that the group was using to conduct the attacks and we took control of them: we redirected these domains to a sinkhole (a sort of online dead end, ed) controlled by Microsoft, so as to reduce the impact of Strontium’s actions ”.
From leaked information, it appears that cybercriminals were targeting some institutions Ukrainian and the organs of Press of the country, as well as government representatives in the Usa and in Europe: Microsoft’s idea is that “the group was trying to gain stable access to the target’s IT facilities, steal sensitive information” and somehow “provide tactical support for the military invasion “.
Doubts about Kaspersky
Alarm from the Cybersecurity Agency: “Beware of Russian software”
by Arturo Di Corinto
The Redmond company has “informed the Ukrainian government of the detected activity and the actions taken” and also recalled that for some time it has been opposing the actions of the Strontium groupin fact since 2016: “We have set up a procedure that allows us to quickly obtain court orders that allow us to act” and “before this week we are taken action 15 times already to take control of over 100 domains controlled by Strontium ”.