On November 11, hackers compromised Ukraine’s state news agency, replacing the homepage with anti-Ukrainian imagery and hijacking its account on the social media platform X. The intruders displayed the word "ZELENET" alongside a crossed-out Ukrainian flag and a link to a Telegram channel. They also renamed the X account to "ZELENET" and altered the biography to include a pro-Russian slogan. Ukrinform confirmed that specialists are currently investigating the attack, assessing the consequences, and working to restore all services. The agency stated it is cooperating with the Security Service of Ukraine (SBU) and the State Service of Special Communications and Information Protection to strengthen its cybersecurity defenses against such sophisticated threats.
A Pattern of Escalating Attacks
Director General Serhii Cherevatyi told Ukrainska Pravda that the agency has faced several cyberattacks in recent months, noting that attackers are increasingly using artificial intelligence. "The enemy is also constantly improving, so we are trying to respond as quickly as possible," Cherevatyi said. This incident follows a series of breaches targeting Ukrainian media outlets this month, indicating a coordinated effort to disrupt information channels. On November 4, a suspected Russian cyberattack disrupted the Kyiv Independent website, allowing hackers to send readers emails containing false claims about President Volodymyr Zelensky. The attackers gained access to the content management system and one newsletter service, publishing fabricated messages in both Russian and English. Two days later, on November 6, hackers compromised the email newsletter account of Ukrainska Pravda, sending some readers a fabricated message about an alleged terrorist attack in Kyiv. The outlet clarified that it had not sent the email and that its contents were entirely false. These attacks followed a breach of Ukraine’s widely used air raid alert app on November 1, when users received fake warnings about nuclear and chemical threats. President Zelensky attributed that specific attack to Russia, highlighting the persistent threat to digital infrastructure.
