Pro-Ukrainian hackers disrupt Aeroflot with massive cyberattack

In Russia, Aeroflot, the national airline, experienced significant operational disruptions due to a cyberattack conducted by a pro-Ukrainian group on July 28, 2025. The attack led to the cancellation of over 40 flights and affected operations at Sheremetyevo Airport in Moscow. In response to these events, the Russian Prosecutor General's Office announced a criminal investigation into the matter, aiming to uncover the details behind the revolt against Aeroflot's information systems. The hackers, who identified themselves as Silent Crow and collaborated with a Belarusian group known as Cyberpartisans BY, claimed their strike was the culmination of a year-long infiltration of Aeroflot’s IT infrastructure. They stated that this extensive operation allowed them to destroy approximately 7,000 servers and gain unauthorized access to senior managerial computers. However, reports have indicated that no substantial evidence was provided to substantiate these claims. Russian officials reacted strongly to the incidents. Kremlin spokesman Dmitry Peskov acknowledged the ongoing threat posed by such hacker attacks against significant companies, asserting that these events should be viewed as part of a broader warfare strategy that encompasses the digital realm. Anton Gorelkin, a lawmaker, emphasized the struggle against these so-called 'hacktivists' and highlighted the notion that they operate in service of unfriendly states, reflecting the complex web of espionage and sabotage amid the ongoing geopolitical tensions. Aeroflot released a statement acknowledging the operational failures and the subsequent service interruptions, apologizing to its passengers for the inconveniences. A team of specialists has been deployed to mitigate risks and attempt a quick recovery of normal operations. The cancellation of flights not only impacts travelers but also adds to the growing uncertainty surrounding the safety and security of digital systems in critical infrastructure during times of heightened conflict, as the implications of cyber warfare continue to evolve, revealing vulnerabilities in the modern digital landscape.