Russian cyber threat actors target Ukraine's telecom provider, Kivestar

The podcast episode discusses the recent cyber attack on Ukraine's telecom provider, Kivestar, carried out by a Russian military intelligence unit known as Voodoo Bear or Sand Worm. The attack resulted in the disruption of data services for millions of mobile and home internet subscribers in Ukraine. The episode explores the motivations behind the attack, which have been a part of the ongoing conflict between Russia and Ukraine. It also delves into the tactics and techniques used by Voodoo Bear, highlighting their history of targeting Ukraine and their involvement in previous disruptive attacks, such as the power outages in 2015 and 2016. The episode points out the significance of the attack on Kivestar and its potential connections to kinetic actions, suggesting a coordinated strategy by the attackers. It also mentions the presence of fake DIVA groups, such as Sultan's PEC, claiming responsibility for the attack. Overall, the episode provides insight into the evolving cyber threat landscape and the need for organizations to assess their defenses and understand the motives and techniques of Russian threat actors.