Belarus Archives - ICSSTRIVE

Hackers Compromised Systems of Belarus’ Largest Chemical Company

April 17, 2024

The hacker group “Cyberpartisans” claims to have hacked the computers and security systems of Belarus’ largest chemical company, Grodno Azot. The hackers promise to restore the data when the plant’s employees arrested during protests against the results of the 2020 presidential election, as well as 75 political prisoners with the worst health conditions, are released.

The hackers claim to have taken control of the company’s website, email, hundreds of work computers, servers, security systems, and surveillance cameras. The boiler room has also been disrupted.

The Grodno Azot website has been down since April 17. “The situation has not affected, and will not affect, the production activities of the enterprise,” the offical company said.

Threat Actor targets Russia’s Aviation Sector.

June 7, 2024

A threat actor known as “Sticky Werewolf” is using layered infection chains to compromise organizations involved with Russia’s aviation industry. The group has been around since at least April 2023, and seems to be interested in espionage relating to the conflict between Russia and Ukraine.

The group was targeting public organizations in Russia and Belarus, but recent targets have included a pharmaceutical company and a Russian research institute involved in microbiology and vaccine development. In prior campaigns, Sticky Werewolf phishing emails included links to download malicious files. Now, its infections are notably more complex. The final payload will be some sort of commercial remote access Trojan (RAT).

Belarus Rail Network disrupted by Hacktivist Group

January 24, 2022

Second reported attack on Belarus Rail, this time with OT consequences. Hacktivist group “Cyber Partisans” disrupted routing and switching by hacking into computers controlling the rail network, halting trains in Minsk, Orsha and Osipovichi. They did this to slow troop movements into Ukraine, who are transiting from Russia through Belarus to support the Russian invasion which began 4 days prior.

Impact: Rail routing and switchgear disabled, trains in Minsk, Orsha, and Osipovichi stopped.