Russian Network Monitoring Firm Microolap Confirms Cyberattack, Denies Major Data Breach

Cyberattack Confirmation

Russian software developer Microolap confirmed that hackers compromised several of its non-critical systems. The company, which specializes in network traffic interception and analysis software, stated that it detected an attempted breach but found no evidence of access to its core infrastructure, customer data, or other sensitive information.

Conflicting Claims

The confirmation followed claims by a hacking group named Black Spark, which asserted it had been inside Microolap's network for over a month. Black Spark claimed to have accessed internal systems, including the EtherSensor network traffic analysis platform, and extracted and deleted data belonging to major Russian clients like Russian Railways, Goznak, VTB Bank, and NEK.TECH. The group published screenshots as evidence, though their authenticity was not independently verified.

Microolap's Rebuttal

Microolap acknowledged the compromise but disputed the scope of the attack described by the hackers. The company's investigation indicated that hackers accessed rarely used development systems hosted by another provider, an outdated version of its website, and an old Bitrix24 customer management system with limited data. These affected systems were isolated from Microolap's core infrastructure, preventing access to EtherSensor or customer and partner data.

Operational Impact and Response

Microolap stated that none of its production systems or critical components for EtherSensor were affected, and the platform continued to operate normally without impact on performance, data integrity, or availability. The company has taken its outdated website offline, implemented additional security measures, and is collaborating with a major Russian cybersecurity firm to investigate the incident.