A group of hackers claiming affiliation with the Wagner Group has taken down Dozor-Teleport, a Russian satellite communications provider used by energy companies and the country’s defense and security services.
The attack, which began on Wednesday at 10 p.m. EST, has resulted in the disconnection of Dozor-Teleport from the internet and the inaccessibility of its website. The hackers have also leaked approximately 700 files, consisting of documents and images, that they claim contain confidential information stolen from Dozor’s servers.
By infosecbulletin
/ Friday , April 18 2025
According to Shadowserver Foundation around 17,000 Fortinet devices worldwide have been compromised using a new technique called "symlink". This number...
Read More
By infosecbulletin
/ Friday , April 18 2025
A critical security flaw has been found in the Erlang/Open Telecom Platform (OTP) SSH implementation, allowing an attacker to run...
Read More
By infosecbulletin
/ Thursday , April 17 2025
On Wednesday, CISA alerted about increased breach risks due to the earlier compromise of legacy Oracle Cloud servers, emphasizing the...
Read More
By infosecbulletin
/ Thursday , April 17 2025
Cisco issued a security advisory about a serious vulnerability in its Webex App that allows unauthenticated remote code execution (RCE)...
Read More
By infosecbulletin
/ Thursday , April 17 2025
On Wednesday, Apple released urgent operating system updates to address two security vulnerabilities that had already been exploited in highly...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
On April 15, 2025, Oracle released a Critical Patch Update for 378 flaws for its products. The patch update covers...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
Check Point Research warns of the active exploitation of a new vulnerability, CVE-2025-24054, which lets hackers leak NTLMv2-SSP hashes using...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
Bengaluru's Whiteboard Technologies Pvt Ltd was hit by a ransomware attack, with hackers demanding a ransom of up to $70,000...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
MITRE Vice President Yosry Barsoum warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness...
Read More
By infosecbulletin
/ Wednesday , April 16 2025
PwC has ceased operations in more than a dozen countries that its global bosses have deemed too small, risky or...
Read More
One of the leaked documents is an alleged agreement that grants Russian security services access to subscriber information from Amtel Svyaz, a satellite communication service provider that is the parent company of Dozor.
The hackers have not yet released any information about how they were able to breach Dozor’s systems. However, they have stated that they have damaged satellite terminals and destroyed confidential information.
ALSO READ:
Daily Cybersecurity Update, June-30, 2023
If the hackers’ claims are accurate, it could take several days to weeks to restore Dozor’s core network and several months to reprogram user equipment and achieve full restoration.
This cyberattack on Dozor-Teleport is the second major breach of a satellite telecommunications service provider in recent months. In February, Russia was accused of carrying out a cyberattack on Viasat, a U.S.-based satellite company, that disrupted internet service for tens of thousands of customers in Ukraine and Europe.
The attacks on Dozor-Teleport and Viasat highlight the vulnerability of satellite communications networks to cyberattacks. As more and more critical infrastructure relies on satellite communications, it is important for governments and businesses to take steps to protect their networks from attack.