Russia-Ukraine war live: UN inspectors locked out of Zaporizhzhia nuclear plant

Russian hackers were inside Ukrainian telecoms company Kyivstar’s system from at least May last year in a cyber-attack that should serve as a “big warning” to the West, Ukraine’s cyber spy chief told Reuters.

The hack, one of the most dramatic since Russia’s full-scale invasion nearly two years ago, knocked out services provided by Ukraine’s biggest telecoms operator for about 24 million users for days from 12 December.

In an interview, Illia Vitiuk, head of the Security Service of Ukraine’s (SBU) cybersecurity department, disclosed exclusive details about the hack, which he said caused “disastrous” destruction and aimed to land a psychological blow and gather intelligence.

He said:

This attack is a big message, a big warning, not only to Ukraine, but for the whole western world to understand that no one is actually untouchable.

He noted Kyivstar was a wealthy, private company that invested a lot in cybersecurity.

The attack wiped “almost everything”, including thousands of virtual servers and PCs, he said, describing it as probably the first example of a destructive cyber-attack that “completely destroyed the core of a telecoms operator.”

For now, we can say securely, that they were in the system at least since May 2023,

I cannot say right now, since what time they had … full access: probably at least since November.

The SBU assessed the hackers would have been able to steal personal information, understand the locations of phones, intercept SMS-messages and perhaps steal Telegram accounts with the level of access they gained, he said.

A Kyivstar spokesperson said the company was working closely with the SBU to investigate the attack and would take all necessary steps to eliminate future risks, adding: “No facts of leakage of personal and subscriber data have been revealed.”

Vitiuk said it had no big impact on Ukraine’s military:

After the major break there were a number of new attempts aimed at dealing more damage to the operator.

Speaking about drone detection, speaking about missile detection, luckily, no, this situation didn’t affect us strongly.