A group of hackers hacked into Russia’s largest airline, Aeroflot. As a result, about 100 domestic and international flights were canceled at Moscow’s Sheremetyevo Airport alone. Among them were flights to Minsk, Yerevan, Astana, St. Petersburg, Sochi, Kazan, Minvody, Kaliningrad, and others. Due to the accumulation of passengers from canceled flights, queues formed at the airport. The company asked passengers to collect their previously checked baggage and leave the airport to avoid crowding.
Two groups, Silent Crow and the Belarusian Cyberpartisans BY, claimed responsibility for the attack. The hackers claim that “as a result of the hack, Aeroflot’s internal IT infrastructure was completely destroyed. We were inside their corporate network for a year. We managed to obtain and download the entire database of flight history, gain control over the personal computers of employees, including senior management, and copy data from wiretapping servers. The total amount of information obtained is 22 terabytes. The number of servers destroyed is 7,000. All of these resources are now inaccessible or destroyed, and recovery will likely cost tens of millions of dollars. The damage from the hack could reach $10-15 million, which includes the cost of restoring the IT infrastructure, plus the costs associated with flight delays, loss of customer data, loss of trust, and fines. The hacker group has not yet specified which financial documents they have obtained. Will they publish all information about the company’s cash flows, account numbers, amounts, and electronic access keys?
