Qilin Ransomware Group Claims Breach of Ukraine’s Ministry of Foreign AffairsÂ
Published on March 7, 2025
- The Qilin ransomware gang announced orchestrating an alleged breach of the Ministry of Foreign Affairs in Ukraine.
- Hackers claim to have exfiltrated private correspondence, personal information, and official decrees.
- Ukraine’s government entity has not commented or confirmed the breach.
The Qilin ransomware group, a well-known Russian-speaking cybercrime entity, has claimed responsibility for a significant cyberattack on Ukraine's Ministry of Foreign Affairs on their Tor leak site.
The hackers imply they obtained sensitive data, including private correspondence, personal information, and official decrees. According to the Qilin group’s statement, some of the stolen data has already been sold to third-party buyers.Â
To substantiate their claims, they published images of the stolen documents. However, the Ukrainian Ministry of Foreign Affairs has not yet confirmed the breach or commented on the legitimacy of the group's evidence.Â
The attack could be part of the continued hybrid warfare tactics associated with Russia's conflict with Ukraine. This strategy often involves hacktivists and cybercriminal groups aligned with broader geopolitical goals.
Known for its double extortion tactic, the Qilin ransomware group emerged as a significant player in the cybercrime landscape in 2022.
This week, Qilin also claimed responsibility for a cyberattack on the Utsunomiya Central Clinic in Japan and, recently, the Palau government and Hikari Seiko.
The alleged attack on Ukraine’s Ministry of Foreign Affairs highlights the evolving threat landscape where geopolitical tensions intersect with advanced cybercriminal operations.
Last year, the U.S. Department of Justice unsealed indictments against five military officers and one civilian who were linked to Russia’s GRU on charges that include conspiracy to hack into key computer systems of the Ukrainian government, as well as data exfiltration, system disruption, and the spreading of malicious software designed for destruction.
Related
Most Popular
Most Popular