Kyiv Independent Website Hit by Suspected Russian Cyberattack, False Information Posted

Website and Newsletter Compromised

The Kyiv Independent, a prominent English-language news outlet in Ukraine, reported a cyberattack that affected its website management system and newsletter distribution service. The incident allowed unauthorized access, leading to the publication of false messages on the website and the dispatch of malicious emails to subscribers.

Fabricated Content Distributed

The attackers used the compromised systems to disseminate fabricated information. One email, written in Russian, falsely claimed Ukrainian President Volodymyr Zelensky launched a nuclear warhead at Kyiv as a "proof of friendship" with Russian President Vladimir Putin, urging recipients to seek shelter. Other emails contained fabricated claims about a physical attack on Zelensky. Staff quickly removed the false messages posted on the publication's website.

Attribution and Impact

The Kyiv Independent attributed the attack to suspected Russian actors based on the content of the messages, though technical evidence was not provided. Editor-in-Chief Olga Rudenko stated that such attacks are part of the ongoing conflict and aim to sow confusion and erode trust. This marks the first time the publication has faced an attack of this nature.

The publication confirmed that banking information for its members and donors was not compromised, as payments are processed through secure third-party services. The Kyiv Independent, founded in November 2021, serves nearly 3 million monthly readers, mostly outside Ukraine, and has over 35,000 paying members.

Ongoing Investigation and Context

Chief Operating Officer Zakhar Protsiuk stated that staff are collaborating with cybersecurity specialists to investigate the breach, identify vulnerabilities, and prevent future intrusions. This incident follows a recent compromise of Ukraine's air raid alert app, which sent fabricated warnings about nuclear and chemical threats.