Politics
Russian hackers were inside Ukraine telecoms giant for months – cyber spy chief
Russian hackers were inside Ukrainian telecoms giant Kyivstar’s system from at least May last year in a cyberattack that should serve as a “big warning” to the West, Ukraine’s cyber spy chief told Reuters.
The hack, one of the most dramatic since Russia’s full-scale invasion nearly two years ago, knocked out services provided by Ukraine’s biggest telecoms operator for some 24 million users for days from Dec. 12.
In an interview, Illia Vitiuk, head of the Security Service of Ukraine’s (SBU) cybersecurity department, disclosed exclusive details about the hack, which he said caused “disastrous” destruction and aimed to land a psychological blow and gather intelligence.
“This attack is a big message, a big warning, not only to Ukraine but for the whole Western world to understand that no one is actually untouchable,” he said. He noted Kyivstar was a wealthy, private company that invested a lot in cybersecurity.
The attack wiped “almost everything”, including thousands of virtual servers and PCs, he said, describing it as probably the first example of a destructive cyberattack that “completely destroyed the core of a telecoms operator.”
During its investigation, the SBU found the hackers probably attempted to penetrate Kyivstar in March or earlier, he said in a Zoom interview on Dec. 27.
“For now, we can say securely, that they were in the system at least since May 2023,” he said. “I cannot say right now, since what time they had … full access: probably at least since November.”
The SBU assessed the hackers would have been able to steal personal information, understand the locations of phones, intercept SMS messages, and perhaps steal Telegram accounts with the level of access they gained, he said.
A Kyivstar spokesperson said the company was working closely with the SBU to investigate the attack and would take all necessary steps to eliminate future risks, adding: “No facts of leakage of personal and subscriber data have been revealed.”
Vitiuk said the SBU helped Kyivstar restore its systems within days and to repel new cyber attacks.
“After the major break there were a number of new attempts aimed at dealing more damage to the operator,” he said.
Kyivstar is the biggest of Ukraine’s three main telecoms operators and there are some 1.1 million Ukrainians who live in small towns and villages where there are no other providers, Vitiuk said.
People rushed to buy other SIM cards because of the attack, creating large queues. ATMs using Kyivstar SIM cards for the internet ceased to work and the air-raid siren – used during missile and drone attacks – did not function properly in some regions, he said.
He said the attack had no big impact on Ukraine’s military, which did not rely on telecoms operators and made use of what he described as “different algorithms and protocols”.
“Speaking about drone detection, speaking about missile detection, luckily, no, this situation didn’t affect us strongly,” he said.
RUSSIAN SANDWORM
Investigating the attack is harder because of the wiping of Kyivstar’s infrastructure.
Vitiuk said he was “pretty sure” it was carried out by Sandworm, a Russian military intelligence cyberwarfare unit that has been linked to cyberattacks in Ukraine and elsewhere.
A year ago, Sandworm penetrated a Ukrainian telecoms operator, but was detected by Kyiv because the SBU had itself been inside Russian systems, Vitiuk said, declining to identify the company. The earlier hack has not been previously reported.
Russia’s defence ministry did not respond to a written request for comment on Vitiuk’s remarks.
Vitiuk said the pattern of behaviour suggested telecoms operators could remain a target of Russian hackers. The SBU thwarted over 4,500 major cyberattacks on Ukrainian governmental bodies and critical infrastructure last year, he said.
A group called Solntsepyok, believed by the SBU to be affiliated with Sandworm, said it was responsible for the attack.
Vitiuk said SBU investigators were still working to establish how Kyivstar was penetrated or what type of trojan horse malware could have been used to break in, adding that it could have been phishing, someone helping on the inside, or something else.
If it was an inside job, the insider who helped the hackers did not have a high level of clearance in the company, as the hackers made use of malware used to steal hashes of passwords, he said.
Samples of that malware have been recovered and are being analysed, he added.
Kyivstar’s CEO, Oleksandr Komarov, said on Dec. 20 that all the company’s services had been fully restored throughout the country. Vitiuk praised the SBU’s incident response effort to safely restore the systems.
The attack on Kyivstar may have been made easier because of similarities between it and Russian mobile operator Beeline, which was built with similar infrastructure, Vitiuk said.
The sheer size of Kyivstar’s infrastructure would have been easier to navigate with expert guidance, he added.
The destruction at Kyivstar began at around 5:00 a.m. local time while Ukrainian President Volodymyr Zelenskiy was in Washington, pressing the West to continue supplying aid.
Vitiuk said the attack was not accompanied by a major missile and drone strike at a time when people were having communication difficulties, limiting its impact while also relinquishing a powerful intelligence-gathering tool.
Why the hackers chose Dec. 12 was unclear, he said, adding: “Maybe some colonel wanted to become a general.”
© Reuters
The results of an in-depth survey conducted by African Innovation Research SA (AIRSA) point to the country’s future being in the hands of coalitions and raise concerns about voter apathy, especially among the youth.
The initial sample comprised some 5 000 participants, of whom 46% confirmed they were either not interested in voting despite being registered or had not registered.
The majority of those surveyed by the independent research company based in Cape Town were in the 18–35 age group, a generation who are increasingly disillusioned with how the country is run.
The remaining 2 700 participants, who were interviewed from across a broad section of South Africa’s nine provinces, indicated that support for the ruling ANC is in decline, dipping below the 50% mark to 43% overall.
The ANC’s strongholds remain the Eastern Cape (61% of those surveyed), 58% in the Free State and 65% in Limpopo, where its challenger is the EFF at 23.7%.
In the country’s fourth-largest economy, Mpumalanga, the ANC leads with 52.3%, the EFF at 21.7% and the DA at 19.7%.
In the North West province, it’s a similar pattern, albeit reversed, with the ANC at 48.3%, the DA at 27.7% and the EFF at 20.0%, while in the Northern Cape, the ANC leads with 47.3%, followed by the DA with 24.3% and the EFF with 15.7%.
The country’s economic engine, Gauteng, is a key player in the power dynamics. Here, the ANC garnered 38.7%, but the EFF is growing its base to 19.3%, challenging the DA’s 20% of the province’s voters.
In the Western Cape, as expected, the DA holds onto a leading margin at 46.0%, with the ANC and EFF at 22.3% and 8.7% respectively. Gayton McKenzie’s Patriotic Alliance (PA) also features in the country’s southernmost province, making a notable showing at 5%.
While former president Jacob Zuma may have been barred from becoming a member of Parliament in the Constitutional Court this week, the new uMkhonto weSizwe Party (MKP) will play a pivotal role in KwaZulu-Natal. Results of the AIRSA survey show that while the ANC currently remains ahead with 28.7%, it’s an even race in the province with similar support for the IFP at 26.0% and MKP at 26.7%.
As experience dictates, the smaller parties will begin a series of bargaining tactics as to whose deck they end up in and call the shots.
At collectively accounting for around 20% of the upcoming vote, these potential coalition partners carry significant influence.
AIRSA also noted that voting in this sector is personality-driven as opposed to ideology.
The fragmentation of South Africa’s political landscape could also contribute to increasing dissatisfaction and disillusionment, particularly when linked to the country’s youth and increasing unemployment.
© IOL (Cape Times)
Former President Jacob Zuma has launched a scathing attack on some of the country’s top judges after he was barred from running for parliament on Monday.
In his first interview since the ban, Zuma told the BBC the Constitutional Court was wrong to decide he was unfit to run, based on his 2021 conviction for contempt of court.
“I expected that from our judges, but they are definitely wrong. Not correct,” the 82-year-old said, adding that the constitution should be changed.
Ahead of next week’s general election, Zuma had been campaigning under the banner of the newly formed uMkhonto weSizwe (MK) party.
He joined the party after falling out with the governing African National Congress (ANC), which he used to lead.
The electoral commission argued that the constitution bars anyone who was sentenced to more than 12 months in prison from serving as a lawmaker – a view backed by the Constitutional Court judges.
Zuma was convicted in 2021 for refusing to testify at an inquiry investigating corruption during his presidency.
His lawyers had insisted he was entitled to become an MP as his sentence was reduced to three months after current President Cyril Ramaphosa released him from prison in what was widely seen as an attempt to placate the former president’s angry supporters.
“The judges of the Constitutional Court have acted very funny to me – towards me in particular,” Zuma told the BBC.
“They are not taking into account the will of the people of this country, they use their own will.”
He was president from 2009 to 2018 before being forced out as leader of the ANC amid allegations of widespread corruption in his government.
The corruption, widely known as “State Capture”, saw hundreds of millions of rands of public assets taken into private hands. Zuma has always denied any direct role in corruption, but is due to face trial next year on allegations of bribery.
He told the BBC he had been wrongly stripped of his role as leader of the ANC.
“I don’t know what ‘State Capture’ means. If people say I am corrupt, what did I do? Do you have any facts about it? Am I guilty?
“I was removed before the end of my term, and nothing was produced as evidence that this was an issue.”
Zuma’s MK party had previously voiced its desire to change South Africa’s constitution, which was drawn up 30 years ago at the birth of the country’s democracy following decades of white-minority rule.
Asked about this in the light of his election ban, Zuma reiterated that the historic document needed to be changed.
“This constitution in the continent of Africa is guided by the laws from Europe, not us,” he said.
“There is nothing that has come right in this continent because we are still dominated by those who were the ones [who] slaved us, and after slavery, oppressed us, and after oppression, put their own laws to run us.
“There are details that clash with our lives.”
An Ipsos opinion poll released last month gave MK 8% of the vote, and the ANC 40% as it loses support to MK and other opposition parties.
But some analysts suggest that with the governing party stepping up its campaign in recent weeks, it could still cross the 50% mark. But if the ANC gets less than half of the vote, it would lose its majority for the first time in 30 years.
MK is expected to do especially well in Zuma’s home region of KwaZulu-Natal. Some opinion polls suggest it could emerge as the biggest party in KwaZulu-Natal, ending ANC dominance of the region.
After Zuma was jailed for contempt of court in 2021, angry supporters sparked days of deadly riots. More than 300 people were killed in the clashes.
On Wednesday Zuma said this violence demonstrated the scale of public support for him.
“This must tell you that the masses of this country loves Zuma – that’s why we had that,” he said.
When asked by the BBC if he would use this interview to call for peace and calm ahead of next week’s election, Zuma replied: “I’ve always done so.”
© BBC News
Iran’s supreme leader has presided over a funeral for the country’s late president, foreign minister and others killed in a helicopter crash on Sunday.
Ayatollah Ali Khamenei led prayers at Tehran University, where caskets carrying the dead were draped in Iranian flags.
President Ebrahim Raisi died alongside Foreign Minister Hossein Amir-Abdollahian and six others in a helicopter crash near the border with Azerbaijan.
Authorities had warned against demonstrations against the funeral procession and insults posted online.
“Oh Allah, we didn’t see anything but good from him,” Ayatollah Khamenei said in the standard prayer for the dead in Arabic.
Iran’s acting president, Mohammad Mokhber, stood nearby and openly wept during the service.
People then carried the coffins out on their shoulders, with chants of “Death to America” heard outside.
They loaded them onto a trailer for a procession through downtown Tehran to Azadi Square, where Raisi gave speeches in the past.
In attendance were top leaders of Iran’s paramilitary Revolutionary Guard, one of the country’s major power centres.
Also on hand was Ismail Haniyeh of Hamas, the militant group that Iran has armed and supported during the ongoing Israel-Hamas war.
Haniyeh is widely considered Hamas’s overall leader and has been a prominent member of the movement since 1980. The US Department of State designated him a terrorist in 2018.
“I come in the name of the Palestinian people, in the name of the resistance factions of Gaza…to express our condolences,” Haniyeh said.
He also described meeting Raisi in Tehran during Ramadan, the holy Muslim fasting month.
He said he heard the president say that “the Palestinian issue” remains the key one of the Muslim world, which “must fulfil their obligations to the Palestinians to liberate their land”.
He also claimed that Raisi called Hamas’ October 7 attack in Israel, which saw 1,200 people killed and 250 others taken hostage, an “earthquake in the heart of the Zionist entity”.
Also expected to attend services in Tehran were Pakistan’s Prime Minister Shehbaz Sharif and a delegation from the Taliban of Afghanistan, which included their Foreign Minister Amir Khan Mutaqqi.
Iran’s theocracy declared five days of mourning over Sunday’s crash, encouraging people to attend the public mourning sessions.
Typically, government employees and schoolchildren attend such events en masse, while others take part out of patriotism, curiosity or to witness historic events.
For Iran’s Shiite theocracy, mass demonstrations have been crucial to demonstrating the legitimacy of their leadership since millions thronged the streets of Tehran to welcome Grand Ayatollah Ruhollah Khomeini in 1979 during the Islamic Revolution, and also attended his funeral 10 years later.
An estimated one million turned out in 2020 for processions for the late Revolutionary Guard General Qasem Soleimani, who was killed in a US drone strike in Baghdad.
Across the capital, large banners were raised hailing Raisi as “the martyr of service”, while others bade “farewell to the servant of the disadvantaged”.
Some residents in Tehran received texts urging them to attend Wednesday’s ceremonies, the AFP news agency reported.
Footage carried by state TV showed streets filled with mourners, many of whom were carrying pictures of Raisi or the Iranian flag.
Funeral rites for the men began on Tuesday in the city of Tabriz and the Shiite clerical centre of Qom, where thousands of mourners attended ceremonies.
After Wednesday’s procession in the capital, Raisi’s remains will be moved to South Khorasan province, before being transferred to his home city of Mashhad in the northeast.
He will then be buried on Thursday evening in the city after funeral rites at the Imam Reza shrine.
Raisi, a hardline cleric, was a highly divisive figure in Iran. In the 1980s, he oversaw the execution of scores of opposition activists while working as a prosecutor.
He unleashed a brutal crackdown against demonstrators angered by the killing of 22-year-old Mahsa Amini in 2022. She died three days after she was detained by morality police in the capital for allegedly violating Iran’s strict rules requiring women to cover their hair with a hijab, or headscarf.
But his ultra-conservative outlook won favour with supporters of the regime, and Raisi was viewed as a possible successor to Ayatollah Khamenei.
© BBC News
Ireland will recognise a Palestinian state, Prime Minister Simon Harris said on Wednesday, adding that he expected other countries to follow in the coming weeks after talking to world leaders.
“Today, Ireland, Norway, and Spain are announcing that we recognise the state of Palestine,” Harris said at a press conference.
“In the lead up to today’s announcement, I’ve spoken with a number of other leaders and counterparts and I’m confident that further countries will join us in taking this important step in the coming weeks,” he added.
He said a two-state solution was the only credible path to peace and security for Israel, Palestine and their peoples.
The recognition of statehood has particular resonance in Ireland given its history, Harris said.
“Taking our place on the world stage and being recognised by others as having the right to be there was a matter of the highest importance for the founders of our state,” he said.
He added that Ireland was unequivocal in fully recognising Israel and its right to exist “securely and in peace with its neighbours”, and he called for all hostages in Gaza to be immediately returned.
Ireland’s recognition of Palestine will be formally enacted on May 28, foreign minister Micheal Martin said on X.
© Reuters
Legal Intelligence Firm redefines regulatory compliance with high-profile hire
New survey points to coalition-led SA, but voter apathy a major factor
Zuma lashes out at judges after election ban
DCS probes alleged criminal syndicate link in Thabo Bester’s escape scandal
New survey points to coalition-led SA, but voter apathy a major factor
You must be logged in to post a comment Login