Hackers Target Czech Organizations After Minister’s Statement

Threat Actor: Народная CyberАрмия | Народная CyberАрмия
Victim: ELDIS Radar Systems | ELDIS Radar Systems
Price: Not specified
Exfiltrated Data Type: Radar system data

Key Points :

  • Targeted a radar manufacturer for civilian and military purposes.
  • Also attacked KARBOX, a company producing superstructures for trucks and special vehicles.

Threat Actor: NoName057(16) | NoName057(16)
Victim: Various Czech portals | Czech portals
Price: Not specified
Exfiltrated Data Type: Access credentials

Key Points :

  • Gained unauthorized access to multiple government and tax-related portals.
  • Included the Czech Army portal and Ministry of Agriculture.

Threat Actor: Azzasec | Azzasec
Victim: Road Directorate of the Zlín Region | Road Directorate of the Zlín Region
Price: Not specified
Exfiltrated Data Type: Road management data

Key Points :

  • Targeted management and maintenance systems for Zlínska roads.

Threat Actor: Khalifa Hackers | Khalifa Hackers
Victim: Various Czech directories | Czech directories
Price: Not specified
Exfiltrated Data Type: Business and academic data

Key Points :

  • Targeted popular search engines and business directories like Seznam.cz and Firmy.cz.
  • Also accessed academic and government institution websites.

Several threat actors, predominantly of Russian origin, allegedly have intensified their activities against organizations in the Czech Republic following the announcement by Czech Defense Minister Jana Černochová regarding the establishment of a “Ukrainian legion”.

Народная CyberАрмия, NoName057(16), Azzasec, and Khalifa Hackers are among the attackers. The allegations about their cyberattacks are published on their Telegram channels.

Alleged attacks targeted the following organizations:

Народная CyberАрмия

  • ELDIS Radar Systems, a radar manufacturer for both civilian and military purposes.
  • KARBOX, a company producing superstructures for trucks and special vehicles designed for both civilian and military use.

NoName057(16)

  • Authorization on the CSA airline portal
  • Authorization on the portal of Information System Application Support for Audit Authority
  • Authorization on the portal of the Chamber of Tax Consultants of the Czech Republic (two different Checkhost links)
  • API National Transportation Information Center
  • Selection procedure, civil service examination
  • Authorization on the Czech Army portal
  • 25th Air Defense Missile Regiment
  • Authorization at Euroclear (two different Checkhost links)
  • Ministry of Agriculture of the Czech Republic
  • Authorization on the portal of the Ministry of Agriculture of the Czech Republic

Azzasec

  • Road Directorate of the Zlín Region
  • Management and maintenance of Zlínska roads

Khalifa Hackers

Local Search Engines and Directories:

  • Seznam.cz: A popular Czech search engine and web portal.
  • Firmy.cz: A business directory associated with Seznam.cz.
  • Najisto.cz: Another business directory under the Seznam.cz umbrella.

General Business Directories:

  • CzechTrade: A government agency promoting trade, which includes a directory of Czech companies.
  • Kompass: An international business directory with a section for Czech companies.

Industry-Specific Directories:

  • Czech Chamber of Commerce: Lists members and provides links to their websites.
  • CzechTourism: Lists tourism-related businesses like hotels, restaurants, and attractions.

Academic and Government Institutions:

  • CZ.NIC: The registry for the .cz domain, which might provide lists of registered domains.
  • Czech Universities: Websites of major universities like Charles University, Czech Technical University, etc.

The post Hackers Allegedly Targeted Czech Organizations After Defense Minister Statement appeared first on Daily Dark Web.