Pro-Ukraine Hackers Disable Russian Investment Platform

The Russian investment and analytics platform Investment Projects has confirmed it fell victim to a major cyberattack from a Ukrainian hacker group. The incident has forced the site offline.

Official statement

In a message on its website, the company explained why the website is down and confirmed that Ukrainian hackers are responsible.

“We have been subjected to a cyber attack by a Ukrainian hacker group. At the moment, we are successfully restoring the infrastructure and platform functionality. You will be able to return to working with our resource in the near future,” the company wrote.

The statement is framed in such a way as to portray the attack as part of a wider campaign to destabilize Russia’s economy.

“Thank you for your understanding. It is nice to hear warm words of support from our clients with whom we have been cooperating all these years. Thank you for staying with us. The enemy is trying to weaken the economy and industry by undermining the work of Russia's services and platforms, but we will be stronger than this,” the company stated.

Attack details

Cyber Anarchy Squad claimed responsibility for the intrusion on Telegram, saying they’ve been trying to hack them for some time.

“We’ve been trying to devote time to volunteering, and today the target is the platform ‘Investment Projects of Russia, a platform where Russian (especially sanctioned) companies look for investors,” the group said on Telegram.

Cyber Anarchy Squad claims they partially destroyed the platform’s infrastructure, accessed internal databases and employee documents, and published stolen files online as proof of the breach.

The platform remains offline. Regulators in Russia have been notified, but the full scope of the data leak has not yet been independently verified.

Who are Cyber Anarchy Squad?

Likely founded in 2022, Cyber Anarchy Squad is a pro-Ukraine hacker group known for cyber operations. The group typically exploits vulnerabilities in online service, uses malware such as Revenge RAT and Spark RAT or used credential theft tools like Mimikatz.

Previous high-profile attacks targeted Russian cybersecurity provider Avanpost, telecom firm Infotel, and many others.