The Ukrainian Cyber Alliance (UCA) successfully breached and disrupted operations at Nodex, a major Russian internet service provider based in St. Petersburg. The hacktivists claimed to have exfiltrated sensitive data and wiped the company’s systems, leaving them without backups.

Nodex confirmed the attack through a VKontakte post, acknowledging that their network was “destroyed” in what they believed to be a Ukrainian-originated cyber assault. The company reported working to restore services from available backups, with priority given to telephony and call center operations.

NetBlocks, an internet monitoring organization, verified the disruption, noting a significant collapse in both fixed-line and mobile services on Nodex’s network. While the company has made progress in restoring core network functions and DHCP services, their website remained offline, and full restoration timeline remains uncertain.

The Ukrainian Cyber Alliance, active since 2016, comprises multiple hacker groups including FalconsFlame, Trinity, RUH8, and CyberHunta. The organization has a track record of successful cyber operations against Russian targets, including:

– Russian Ministry of Defense
– Commonwealth of Independent States Institute
– Donetsk People’s Republic’s Ministry of Coal and Energy
– Vladimir Putin’s political adviser’s office
– Trigona ransomware gang (October 2023)

This attack represents another significant blow to Russian infrastructure as part of the ongoing cyber conflict between the two nations.