A group of hackers claiming affiliation with the Wagner Group has taken down Dozor-Teleport, a Russian satellite communications provider used by energy companies and the country’s defense and security services.
The attack, which began on Wednesday at 10 p.m. EST, has resulted in the disconnection of Dozor-Teleport from the internet and the inaccessibility of its website. The hackers have also leaked approximately 700 files, consisting of documents and images, that they claim contain confidential information stolen from Dozor’s servers.
By infosecbulletin
/ Friday , May 9 2025
YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...
Read More
By infosecbulletin
/ Friday , May 9 2025
Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
By infosecbulletin
/ Thursday , May 8 2025
The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
By infosecbulletin
/ Thursday , May 8 2025
SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
By infosecbulletin
/ Thursday , May 8 2025
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
By infosecbulletin
/ Thursday , May 8 2025
Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
By infosecbulletin
/ Wednesday , May 7 2025
Attackers linked to the Play ransomware operation deployed a zero-day privilege escalation exploit during an attempted attack against an organization...
Read More
By infosecbulletin
/ Wednesday , May 7 2025
Hackers are exploiting an unauthenticated remote code execution vulnerability in the Samsung MagicINFO 9 Server to take control of devices...
Read More
By infosecbulletin
/ Tuesday , May 6 2025
CISA added the Langflow vulnerability, CVE-2025-3248 (CVSS score 9.8), to its Known Exploited Vulnerabilities catalog. Langflow is a popular tool...
Read More
By infosecbulletin
/ Tuesday , May 6 2025
Google has released its monthly Android security updates, addressing 46 vulnerabilities, including one that has been actively exploited. CVE-2025-27363 (CVSS...
Read More
One of the leaked documents is an alleged agreement that grants Russian security services access to subscriber information from Amtel Svyaz, a satellite communication service provider that is the parent company of Dozor.
The hackers have not yet released any information about how they were able to breach Dozor’s systems. However, they have stated that they have damaged satellite terminals and destroyed confidential information.
ALSO READ:
Daily Cybersecurity Update, June-30, 2023
If the hackers’ claims are accurate, it could take several days to weeks to restore Dozor’s core network and several months to reprogram user equipment and achieve full restoration.
This cyberattack on Dozor-Teleport is the second major breach of a satellite telecommunications service provider in recent months. In February, Russia was accused of carrying out a cyberattack on Viasat, a U.S.-based satellite company, that disrupted internet service for tens of thousands of customers in Ukraine and Europe.
The attacks on Dozor-Teleport and Viasat highlight the vulnerability of satellite communications networks to cyberattacks. As more and more critical infrastructure relies on satellite communications, it is important for governments and businesses to take steps to protect their networks from attack.