Microsoft Corp has said that it had disrupted cyberattacks from Russian military spies targeted at Ukrainian, European and American entities.
In a blog post, the tech giant said that a group it nicknamed “Strontium” was using seven internet domains to conduct attacks on Ukrainian institutions as well as government bodies and think tanks in the US and the European Union involved in foreign policy, without identifying any of the targets by name.
Also read: News correspondent Benjamin Hall ‘lucky to be here’ after injury in Ukraine
In a statement, Microsoft said, “We believe Strontium was attempting to establish long-term access to the systems of its targets, provide tactical support for the physical invasion and exfiltrate sensitive information. We have notified Ukraine’s government about the activity we detected and the action we’ve taken.”
Also read: Vladimir Putin has given up on conquering Kyiv, says Pentagon chief
Strontium is Microsoft’s moniker for a group also known as Fancy Bear or APT28, a hacking squad linked to Russia’s military intelligence agency.
Microsoft also said that it obtained a court order that authorised the company to take control of those seven internet domains used by Strontium for conducting the cyberattacks.
Also read: Russian Nobel-winning editor Dmitry Muratov says he was attacked on train
“We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium’s current use of these domains and enable victim notifications,” it said.
Nearly all of Russia’s state actors are engaged in the ongoing offensive against Ukraine’s government and critical infrastructure.
Also read: Bucha massacre to Russian oil import: What to expect in India-US 2+2 talks
The statement, by the tech giant, comes as the Russian invasion of Ukraine entered its 44th day amid reports of alleged war crimes committed by invading troops.
Earlier, the UN General Assembly voted to suspend Russia from the Human Rights Council over the brutal killings of civilians in Bucha.