Cyber Incident Victim: Caritas Internationalis
Date:
Mar 2022
Location:
Italy
Summary
A Catholic humanitarian organization experienced a disruptive cyber incident during an online press conference focused on Ukraine, conducted via Zoom. Hackers interrupted the event with prolonged audio disruptions featuring obscenities and children’s voices, while also flooding the chat function with offensive messages. The attack coincided with heightened hacktivist activity linked to the Russia-Ukraine conflict, though no explicit attribution or motive was confirmed. The intrusion prevented the organization’s representative from delivering remarks and compromised the integrity of the virtual gathering.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 1, 2022, Caritas Internationalis, a Catholic humanitarian organization, experienced a disruptive cyber incident during a Zoom-hosted online press conference focused on the humanitarian crisis in Ukraine. The intrusion occurred immediately as Aloysius John, the charity’s Secretary-General, began his opening remarks. Attackers overwhelmed the audio feed with sustained obscenities, preventing John from being heard. This initial disruption lasted approximately three minutes and included multiple voices, some impersonating children, shouting profanities. Simultaneously, compromised Zoom accounts exploited the platform’s chat functionality to flood participants with additional offensive messages. The attackers’ coordinated actions paralyzed the event, forcing an unplanned interruption to the live-streamed briefing intended to address urgent humanitarian needs in Ukraine.
The incident occurred against the backdrop of heightened hacktivist activity linked to the Russia-Ukraine conflict, though no specific group claimed responsibility. Caritas Internationalis did not publicly disclose technical details about the intrusion method, attacker origins, or compromised accounts. The disruption directly impacted the organization’s ability to communicate its humanitarian message during a critical period, drawing attention to the vulnerability of virtual events to targeted interference. No data theft, financial impact, or follow-on cyber activities were reported in connection with the event. Media coverage characterized the attack as part of a broader pattern of hacktivist operations targeting entities perceived as aligned with opposing sides in the geopolitical conflict.