The Kyiv Independent has restored access to its website following a suspected Russian cyberattack that compromised its content management system and newsletter service, allowing attackers to distribute fabricated news reports to subscribers.
The Ukrainian news outlet disclosed the incident on November 4, saying hackers gained access to its website’s content management system (CMS) and one of the services used to distribute newsletters. The intrusion disrupted the publication’s website and allowed attackers to send fraudulent emails in Russian and English.
The attackers sent four emails containing false claims about Ukrainian President Volodymyr Zelensky and Russian President Vladimir Putin. One message falsely claimed that Zelensky had launched a nuclear warhead at Kyiv following a meeting with Putin. Other messages contained fabricated claims about a physical attack on the Ukrainian president.
The hackers also attempted to publish similar messages directly on the publication’s website. The newsroom removed the unauthorized posts after discovering them and sent an explanation to subscribers. As of November 5, the Kyiv Independent website is accessible again and displaying new articles.
Editor-in-chief Olga Rudenko said the content of the fraudulent messages pointed to a Russian operation. However, she cautioned that the publication could not confirm whether the same attackers were responsible for a separate incident involving Ukraine’s air-raid alert application.
The outlet’s chief operating officer, Zakhar Protsiuk, said the team had been working with cybersecurity specialists to stop the attack, identify vulnerabilities and protect its platforms against further intrusions. The publication also confirmed that members’ and donors’ banking information was not exposed, as payment details are processed through third-party payment providers.
The incident came just days after hackers compromised Ukraine’s Air Alert application, distributing false warnings about nuclear and chemical threats, street fighting and an incoming missile. The similarities between the two incidents have raised further concerns about cyber operations targeting Ukraine’s information infrastructure. Abijita previously reported on the cyberattack that disrupted Ukraine’s Air Alert application.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
