Massive Russian Espionage Operation Uncovered Through Wi-Fi Targeting Citizens of Ukraine, USA, and EU – SBU

The operation revealed that Russian intelligence services were attempting to spy on citizens of Ukraine, European Union countries, and the United States through compromised office and home Wi-Fi routers. This alarming discovery highlights the vulnerabilities present in many routers that do not comply with modern security protocols.

During the investigation, it was established that Russian operatives were targeting routers lacking up-to-date security measures. Once they successfully infiltrated these devices, they redirected traffic through their own DNS servers. This method allowed them to collect passwords, authentication tokens, and other sensitive information, including emails that were protected by SSL and TLS protocols.

In a statement released by the SBU's press service on social media platform Facebook, it was noted that the information gathered by the adversary was intended for use in cyberattacks, information warfare, and intelligence gathering. Of particular interest to Russian intelligence were communications exchanged by employees and military personnel of government agencies, units of the Ukrainian Defense Forces, as well as enterprises within the defense industry.

The Security Service of Ukraine is urging all router owners to check the model and software version of their devices. It is crucial to promptly update the software or replace the router with a more modern model. Additionally, users are advised to change their device access passwords, disable remote access to the control panel, and remove any suspicious settings. Internet service providers are also being asked to assist their customers in implementing these security measures.

As a result of the joint cyber operation, over 100 servers were blocked, and hundreds of routers were taken out of the adversary's control, solely in Ukraine. This significantly weakened the intelligence capabilities of the Russian military intelligence and prevented the destruction of equipment at the software level. The statement emphasized that these actions represent an important step in combating cyber threats and ensuring information security.

This situation underscores the importance of adhering to modern security standards in information technology, especially in the face of increasing threats from state actors. Wi-Fi router owners must be particularly vigilant regarding the security of their devices, as malicious actors can exploit any vulnerabilities to gain access to sensitive information.