The SSU Cyber Department is systematically countering the occupiers’ information and sabotage activities. Since the beginning of the full-scale invasion, the SSU has neutralized almost 3,500 cyberattacks on electronic systems of central authorities and critical infrastructure facilities of Ukraine.

Of these, 1,650 cyber threats were detected in ‘real time’ by the Security Information and Event Management System operating at the SSU.

It has been established that the vast majority of russian attacks were aimed at either destroying digital services or destabilizing the work of strategically important enterprises in energy and transport sectors.

russian special services and hacker groups under their control are involved in organizing and conducting such acts of sabotage.

For example, in Poltava region the SSU dismantled a hacker group acting in russia’s interests. The offenders planned to carry out a series of powerful cyberattacks on electronic systems of government institutions and energy facilities.

The criminal group consisted of four hackers who specialized in DDoS attacks on digital information resources.

For this, they received money through russian payment systems banned in Ukraine.

However, the SSU exposed this plan at the preparation stage, identified russian organizers and detained the perpetrators.

Another hacker group was neutralized in Lviv. On the occupiers’ instructions, cyber offenders massively hacked active accounts of Internet users from Ukraine and the EU member states, gaining access to personal data of citizens.

According to the investigation, the aggressor used the hacked accounts to spread disinformation about the socio-political situation in Ukraine and in the EU supposedly on behalf of ordinary people.

The organizer of the pro-kremlin hacker group has been served a notice of suspicion; court ruled to keep him in custody.

Investigations are ongoing.

The SSU cyber units will continue to protect the national digital space.