In this story, we’ll aim to summarize how information flow in the war-affected country has taken a hit.
Cyberattacks
Yesterday, the State Service for Special Communications and Information Protection of Ukraine said several government websites were under a DDoS (Distributed Denial of Service) attack. As such, users wouldn’t be able to access these critical sites in the midst of this crisis. Today, the authority said, “phishing attacks on public authorities and critical infrastructure, the spread of malicious software, as well as attempts to penetrate private and public sector networks and further destructive actions have intensified.” It has advised citizens to back up critical information, and isolate workstations that are not important at the moment. Later in the night, researchers from security firm ESET said thousands of computers in Ukraine were under a malware attack. They found that this data wiper malware was aimed at corrupting data and taking over servers. Currently, this attack is not being attributed to a particular threat actor.
— ESET research (@ESETresearch) February 23, 2022 Netblocks, an agency tracking internet disruptions all over the world, noted this morning that internet services were disrupted in Kharkiv, Ukraine’s second-biggest city, after Russian forces attacked it early today. It isn’t clear if the infrastructure was damaged by shelling. The tweet describes this as happening after explosions were heard in the city.
📰 Live Report: https://t.co/S0qJQ7CbNv pic.twitter.com/cVSJg2XtQf — NetBlocks (@netblocks) February 24, 2022 Infrastructure company Cloudflare noted that it had seen a small uptick in cyberattacks against Ukrainian government websites, and it’s actively keeping an eye on the situation in the country.
Misinformation and Telegram’s role in it
Telegram is one of the most popular communication channels in Russia and Ukraine. As Jordan Wildon, a misinformation researcher noted, that app could be a key source of information to people in that region. One of the examples is Ukrainian President Volodymyr Zelensky’s recent address to the people of Russian through Telegram. As MSNBC reporter Cal Perry noted, he used the app to broadcast his message, because Russian media might not air his address — given the state has tight control over press information. After Russia began its attack, the country’s press watchdog, Roskomnadzor, indicated local media to use only state verified information.
— Cal Perry (@CalNBC) February 24, 2022 While a lot of Ukrainian officials and news channels are present on Telegram, the platform is also rife with misinformation. Freelance reporter Justin Ling tweeted that several pro-Kremlin channels are justifying Russia’s invasion as steps to “denazify Ukraine.” This statement doesn’t make sense, as Ukraine is led by a Jewish non-nazi president. Last week, Eliot Higgins, founder of Bellingcat, an Amsterdam-based investigative outlet, dissected a false video circulated on Telegram that showed “Polish speaking saboteurs” attempting to blow up a storage tank in Gorlovka.
— Eliot Higgins (@EliotHiggins) February 20, 2022 On February 18, a pro-Russian separatist leader published a clip on his Telegram channel “ordering emergency evacuations” from eastern Ukraine to Russia. However, Bellingcat found from the metadata that the video was created two days prior. Notably, false information is not limited to Telegram. Outlets from both countries are freely tweeting doctored info masquerading as news, and that could lead to confusion regarding the situation.
— ᗰᗩᖇᑕEᒪ ᐯᗪ ᗷEᖇG (@marcelvandenber) February 24, 2022
What happens next?
In a tense situation like this, the internet plays a key role for people in affected countries to get reliable information from verified sources about what’s happening to them and around them. Internet shutdowns or service breakdowns in those regions could have devastating effects. In a story last week, the New York Times pointed out that some of Ukraine’s internet services were being partially disrupted. Experts noted that Russia could target the country’s telecommunication services to create an information blackout. However, given that Ukraine has more than 2,000 internet service providers, it could be a difficult task. On the other hand, Russia could face tech challenges in the coming days, as the US is pondering new restrictions on the country. Reuters reported that as a part of these sanctions, it could prohibit US-based companies from providing services to Russia. That could halt sales of future devices and cloud services that are critical for tech infrastructure. We’ll update this story as the situation develops.
