Breaking News
Investing Pro 0
Last Call for Cyber Monday! Save Now on Claim 60% OFF

Exclusive-Russian hackers seek war crimes evidence, Ukraine cyber chief says

Published Sep 22, 2023 17:57 Updated Sep 22, 2023 22:25
Saved. See Saved Items.
This article has already been saved in your Saved Items
© Reuters. Yurii Shchyhol, Head of the State Service of Special Communication and Information Protection of Ukraine, speaks during an interview with Reuters, amid Russia's attack on Ukraine, in Kyiv, Ukraine September 22, 2023. REUTERS/Ivan Lyubysh-Kirdey/File Photo
Add to/Remove from a Portfolio
Add to Watchlist
Add Position

Position added successfully to:

Please name your holdings portfolio

By Tom Balmforth and James Pearson (LON:PSON)

KYIV/LONDON (Reuters) - Russian spies are using hackers to target computer systems at law enforcement agencies in Ukraine in a bid to identify and obtain evidence related to alleged Russian war crimes, Ukraine's cyber defence chief told Reuters on Friday.

The hackers, working across Russia's foreign, domestic and military intelligence agencies, have stepped up digital intrusion campaigns targeting the Ukrainian Prosecutor General's office and departments documenting war crimes, said Yurii Shchyhol, head of the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), which handles cyber defence in the embattled country.

"There's been a change in direction, from a focus on energy facilities towards law enforcement institutions which had previously not been targeted that often," Shchyhol said.

"This shift, towards the courts, prosecutors and law enforcement units, shows that hackers are gathering evidence about Russian war crimes in Ukraine" with a view to following Ukraine's investigations, he added.

The espionage activity will be flagged in an upcoming SSSCIP report, due to be published on Monday.

The report, a copy of which was reviewed by Reuters, says hackers were also trying to gather intelligence on Russian nationals arrested in Ukraine, with a view to "help these individuals avoid prosecution and move them back to Russia".

"The groups we've identified as being engaged in this activity are part of Russia's GRU and FSB intelligence agencies," Shchyhol said.

Russia's Foreign Ministry and the Federal Security Service (FSB) did not immediately respond to written requests from Reuters for comment. Russia's GRU military intelligence agency could not be reached for comment.

Shchyhol declined to identify exactly which units had been targeted by the hacking campaign, citing security concerns. The number of cybersecurity incidents documented by the SSSCIP grew by 123% in the first six months of this year compared with the second half of 2022, he added.

Russian hackers have prioritised targeting government bodies and trying to gain access to their e-mail servers, Shchyhol said, without elaborating. Reuters was unable to independently verify any of the hacks detailed by Shchyhol and the report.

On Tuesday the Netherlands-based International Criminal Court (ICC), said it had detected "unusual activity" on its computer network at the end of last week. It was still not clear on Friday who was behind the hack.

The court made headlines in March when it issued an arrest warrant for Russian President Vladimir Putin on suspicion of illegally deporting children from Ukraine. The Kremlin rejects the accusations and the court's jurisdiction.


Ahead of Russia's invasion of Ukraine in February 2022, Western intelligence agencies warned of potential cyberattacks which could spread elsewhere and cause "spillover" damage on global computer networks.

While there has been little evidence of spillover to date, hacks have been regularly leveraged by Russia alongside its military operations.

An attempt by a Russian intelligence hacking group dubbed "Sandworm" to launch a destructive cyberattack against Ukraine's electricity grid was thwarted in April, 2022.

Shchyhol said his department saw evidence that Russian hackers were accessing private security cameras within Ukraine to monitor the outcome of long-range missile and drone strikes.

"We have documented several attempts to gain access to video cameras near the facilities they attacked, and to systems that provide information about the stability of the energy network," he said.

Russia attacked Ukrainian energy infrastructure with a winter air campaign last year that caused sweeping power cuts for millions of people. Shchyhol said energy infrastructure was also targeted with cyber attacks and that he expected those attacks to happen again this winter.

"You need to understand that the cyber war will not end even after Ukraine wins on the battlefield," Shchyhol said.

Exclusive-Russian hackers seek war crimes evidence, Ukraine cyber chief says

Related Articles

Add a Comment

Comment Guidelines

We encourage you to use comments to engage with users, share your perspective and ask questions of authors and each other. However, in order to maintain the high level of discourse we’ve all come to value and expect, please keep the following criteria in mind: 

  • Enrich the conversation
  • Stay focused and on track. Only post material that’s relevant to the topic being discussed.
  • Be respectful. Even negative opinions can be framed positively and diplomatically.
  •  Use standard writing style. Include punctuation and upper and lower cases.
  • NOTE: Spam and/or promotional messages and links within a comment will be removed
  • Avoid profanity, slander or personal attacks directed at an author or another user.
  • Don’t Monopolize the Conversation. We appreciate passion and conviction, but we also believe strongly in giving everyone a chance to air their thoughts. Therefore, in addition to civil interaction, we expect commenters to offer their opinions succinctly and thoughtfully, but not so repeatedly that others are annoyed or offended. If we receive complaints about individuals who take over a thread or forum, we reserve the right to ban them from the site, without recourse.
  • Only English comments will be allowed.

Perpetrators of spam or abuse will be deleted from the site and prohibited from future registration at’s discretion.

Write your thoughts here
Are you sure you want to delete this chart?
Post also to:
Replace the attached chart with a new chart ?
Your ability to comment is currently suspended due to negative user reports. Your status will be reviewed by our moderators.
Please wait a minute before you try to comment again.
Thanks for your comment. Please note that all comments are pending until approved by our moderators. It may therefore take some time before it appears on our website.
Are you sure you want to delete this chart?
Replace the attached chart with a new chart ?
Your ability to comment is currently suspended due to negative user reports. Your status will be reviewed by our moderators.
Please wait a minute before you try to comment again.
Add Chart to Comment
Confirm Block

Are you sure you want to block %USER_NAME%?

By doing so, you and %USER_NAME% will not be able to see any of each other's's posts.

%USER_NAME% was successfully added to your Block List

Since you’ve just unblocked this person, you must wait 48 hours before renewing the block.

Report this comment

I feel that this comment is:

Comment flagged

Thank You!

Your report has been sent to our moderators for review
Continue with Google
Sign up with Email