Ukraine rejects allegations of cyberattack on X
Cybersecurity analysts caution that using IP addresses alone to determine the source of an attack can be misleading, as hackers routinely disguise their locations.
-
Computer monitors and a laptop display the X, formerly known as Twitter, sign-in page, July 24, 2023, in Belgrade, Serbia (AP)
Ukrainian officials have rejected allegations of involvement in a large-scale cyberattack that disrupted the social media platform X, after its owner, Elon Musk, suggested the attack originated from Ukraine. The incident, which caused major service interruptions on Monday, has since been claimed by a pro-Palestinian hacker group.
Musk described the attack as "massive" and pointed to IP addresses traced to Ukraine as possible evidence of its origin. However, Ukrainian Foreign Affairs Committee chair Oleksandr Merezhko dismissed the claim, asserting that Ukraine had "absolutely" no role in the incident. He added that such an operation would be counterproductive to Ukraine's interests and argued that the country is frequently used as an "easy scapegoat" by the media.
In a new development, Dark Storm Team, a hacker collective known for its cyber disruptions in support of Palestinian causes, has claimed responsibility for the attack. The group has a track record of launching Distributed Denial of Service (DDoS) attacks, having previously targeted digital infrastructure in the United States, Ukraine, "Israel", and the UAE. Their claim complicates the attribution of the attack, raising questions about whether Ukraine was wrongly accused.
Read more: Hegseth orders Pentagon to halt anti-Russia offensive cyberoperations
Cybersecurity analysts caution that using IP addresses alone to determine the source of an attack can be misleading, as hackers routinely disguise their locations. Experts suggest that while Musk's comments may indicate a possible link to Ukraine-based servers, Dark Storm Team's admission introduces another angle that must be investigated.
Despite the disruption, X has since restored its services. Investigations remain ongoing to determine the exact perpetrators behind the cyberattack and whether additional actors were involved.