News: 0178495390

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Cyberattack Cripples Russian Airline Aeroflot (politico.com)

(Monday July 28, 2025 @05:30PM (BeauHD) from the crushing-blow dept.)


New submitter [1]Pravetz-82 shares a report from Politico:

> A cyberattack on Russian state-owned flagship carrier Aeroflot caused a mass outage to the company's computer systems on Monday, Russia's prosecutor's office said, [2]forcing the airline to cancel more than 100 flights and delay others . Ukrainian hacker group Silent Crow and Belarusian hacker activist group the Belarus Cyber-Partisans, which opposes the rule of Belarusian President Alexander Lukashenko, claimed responsibility for the cyberattack. Images [3]shared on social media showed hundreds of delayed passengers crowding Moscow's Sheremetyevo airport, where Aeroflot is based. The outage also disrupted flights operated by Aeroflot's subsidiaries, Rossiya and Pobeda. While most of the flights affected were domestic, the disruption also led to cancellations for some international flights to Belarus, Armenia and Uzbekistan.

>

> Silent Crow claimed it had accessed Aeroflot's corporate network for a year, copying customer and internal data, including audio recordings of phone calls, data from the company's own surveillance on employees and other intercepted communications. "All of these resources are now inaccessible or destroyed and restoring them will possibly require tens of millions of dollars. The damage is strategic," the channel purporting to be the Silent Crow group [4]wrote on Telegram . There was no way to independently verify its claims. The same channel also shared screenshots that appeared to show Aeroflot's internal IT systems, and insinuated that Silent Crow could begin sharing the data it had seized in the coming days. "The personal data of all Russians who have ever flown with Aeroflot have now also gone on a trip -- albeit without luggage and to the same destination," it said. The Belarus Cyber-Partisans told The Associated Press that they had hoped to "deliver a crushing blow."

Russia's Prosecutor's Office [5]said it had opened a criminal investigation. Meanwhile, Kremlin spokesperson Dmitry Peskov called reports of the cyberattack "quite alarming," adding that "the hacker threat is a threat that remains for all large companies providing services to the general public."



[1] https://slashdot.org/~Pravetz-82

[2] https://www.politico.com/news/2025/07/28/cyberattack-on-russian-airline-aeroflot-causes-the-cancellation-of-more-than-100-flights-00479963

[3] https://x.com/igorsushko/status/1949913076448608271

[4] https://t.me/silentcrow_reborn/18

[5] https://epp.genproc.gov.ru/web/gprf/mass-media/news?item=106273677



Nicely done (Score:3)

by shilly ( 142940 )

And about fucking time that Russia started to feel some additional pain for its unconscionable actions

Interesting (Score:3)

by smooth wombat ( 796938 )

"the hacker threat is a threat that remains for all large companies providing services to the general public."

Unlike drones and bombs which deliberately target hospitals, schools, bus stations, train stations, ambulances and other services to the general public, right?

Meanwhile, back at Sheremetyevo International (Score:2)

by Random361 ( 6742804 )

Meanwhile, back at Sheremetyevo International Airport, travelers were treated to advertisements for the food court where Afghanistan foods were being touted next to poo emojis, and the vodka was being watered down in the bar to try and pay for the mounting losses in Ukraine. In other news, sources, who are anonymous because they were not authorized to speak to the press, say that Vladimir Putin was Rickrolled repeatedly all night.

Maybe don't invade your neighbor (Score:1)

by argStyopa ( 232550 )

...just saying.

Supposedly still running XP (Score:2)

by jacks smirking reven ( 909048 )

[1]CYBER STRIKE AGAINST RUSSIAN AEROFLOAT! [cpartisans.org]

On the hackers page they claim the systems were running XP and Server 2003 and the CEO had a password from 2022.

Related but over the weekend I watched this Youtube doc on "Putin's Bears" the groups of Russian state backed hacking operations which had some very interesting details on the Germany hack and the DNC hack and the methods employed, very well done and evenhanded.

[2]The Hunt for the World's Most Dangerous Hackers [youtube.com]

[1] https://www.by.cpartisans.org/post/kiberudar-po-ajeroflotu-rf

[2] https://www.youtube.com/watch?v=ZhfI0EboPU0

Re: Supposedly still running XP (Score:2)

by drinkypoo ( 153816 )

Was it "PutoIsACulo"?

Potrachaites you uznayte! (Score:2)

by ihadafivedigituid ( 8391795 )

Now is the findink out, yes?

What's that sound? (Score:2)

by 93 Escort Wagon ( 326346 )

Oh, it was the thud from another Russian CEO accidentally falling out of a window!

<james> any gnome freaks around?
<Knghtbrd> not me, I'm just a freak