Ukrainian cybersecurity officials have announced that the threat actor known as Sandworm, supported by the Russian government, has been clandestinely present in the systems of Ukraine’s telecommunications operator Kyivstar since at least May 2023.
The incident, which emerged last month, is described as a “powerful hacker attack” and resulted in obstructing the internet and mobile access for millions of customers. Shortly thereafter, a computer hacking group affiliated with Russia, named Solntsepyok, claimed responsibility for the breach.