Russian attacks on Ukrainian infrastructure cause internet outages, cutting off a valuable wartime tool

With its war effort faltering, the Kremlin is stepping up its attacks on Ukrainian power plants, resulting in cascading internet failures.

When Russian forces crossed into Ukraine early last year, one of their first targets was a key piece of internet infrastructure. By hitting the satellite internet provider Viasat on Feb. 24, 2022, with a wiper malware attack that infected its networking hardware, Russian forces appear to have disrupted communications at a key moment. 

But as the war has dragged on, disruptions to Ukraine’s internet have grown increasingly low tech. With the Russian war effort faltering, the Kremlin has stepped up its missile and artillery attacks on Ukraine’s energy infrastructure, and that has resulted in a series of localized internet outages, according to findings released by the security company Cloudflare on Wednesday. 

Beginning in the fourth quarter of 2022 and into the first quarter of 2023, a series of Russian strikes on local energy infrastructure caused internet outages in cities ranging from Odessa to Kharkiv. On Jan. 27, Russian airstrikes targeted Odessa’s internet infrastructure, resulting in a partial outage that lasted some 18 hours. On March 9, Russian attacks on Ukrainian energy and distribution networks caused disruptions in internet access in Kharkiv that lasted nearly two days. 

The shift in Russian targeting to more aggressively focus on energy infrastructure has had cascading effects on Ukraine’s internet access. “The power goes down in a given area and internet access obviously suffers,” said David Belson, Cloudflare’s head of data insight. When the power gets knocked out, that can cause cell transmission towers to no longer function, knocking out the internet in unpredictable ways.  

“The network engineers there are really doing heroic work just keeping facilities online,” he said.

There is nothing to indicate that Russian forces are striking electrical infrastructure with the goal of disrupting the internet, but Cloudflare’s data shows how the Kremlin’s shift toward more aggressive targeting of civilian infrastructure is impacting ordinary Ukrainian’s access to information. 

Internet access has been a key in Ukraine’s attempt to fend off the Russian invasion. The Russian invasion forced key Ukrainian state services to move online, and the internet has been a primary method for the government to spread information about what is happening in the country, for President Volodymyr Zelensky to broadcast his nightly address and to galvanize domestic and international support.

In areas controlled by Russian forces, occupying powers have re-routed key parts of Ukraine’s internet infrastructure to make it more easily surveilled.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

• Dogged Russia-based botnet dismantled after 23-year run

• FBI raises alarm over deceptive phishing campaign targeting prominent people

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure