CYBERATTACK ON AEROFLOT!
- i_cpartisan
- Aug 4
- 2 min read
We are helping Ukrainians in their fight against the occupiers by launching a cyberattack on Aeroflot and paralysing Russia's largest airline.
🔥 We destroyed over 7,000 servers and workstations in offices in Sheremetyevo, Melkisarovo and related data centres.
🔥 We wiped out the CREW, Sabre, Sharepoint, Exchange, KASUD, Sirax, Sofi, CRM, ERP, 1C databases and information systems, security systems, and other elements of Aeroflot's corporate network structure.
🔥 We downloaded numerous databases, employee wiretaps, emails and much more. Expect dumps!
🔥 We extracted an extensive database of flight history, which can now be used on request for independent investigations.
Cyberattack on Aeroflot — details of the attack
Together with our colleagues from Silent Crow we spent many months in Aeroflot's corporate network developing access. The successful intrusion was made possible in large part by the fact that some company employees neglected basic password security. For example, Aeroflot CEO Sergey Alexandrovsky had not changed his password since 2022. 😉
The network uses Windows XP and 2003, which led to the compromise of their entire infrastructure.
This gave us control over the personal computers of employees, including senior management. We methodically advanced to the core of the infrastructure — Tier0.
The cyberattack on Aeroflot's corporate network began on the night of 27 to 28 July. By early morning, we had destroyed over 7,000 servers and workstations, databases and internal systems.
All data has been erased using a special innovative algorithm. 😎
We kept the most interesting stuff for ourselves, including employee wiretaps and work emails. Stay tuned for the publication on our channel! 🔥
We posted the following message on employee screens:
At 8 a.m. Minsk time, official sources at Aeroflot announced a ‘malfunction.’ But we know the truth. 😉
"Dear passengers and partners! There has been a malfunction in the airline's information systems. Service interruptions are possible.
In this regard, we expect to make adjustments to the flight schedule, including rescheduling and cancellations. We kindly ask passengers to monitor the information on the online boards of the airports' websites throughout the airline's route network (the Sheremetyevo Airport online board for departures from Moscow), the airport information boards and the announcements made over the airport's public address system.
A team of specialists is currently working to minimise the risks to the flight schedule and restore normal services as soon as possible. The airline apologises for any inconvenience caused.
A huge number of Russian flights have been delayed or cancelled. The corporate network is in ruins, and most of the data has been lost forever. 💥
Recovery will take a very long time, not to mention the financial damage to the Russian occupiers. Aeroflot's shares are already falling rapidly. And there's more to come!
We will continue our attacks on the aggressors as long as the Russian regime poses a direct threat to the territorial integrity and independence of Belarus and Ukraine. The fate of Aeroflot could be shared by any company or organisation in Russia and Belarus that works for the Kremlin dictatorship. 👊📛
