Cyber Incident Victim: Kasvyksta
Date:
Sep 2019
Location:
Lithuania
Summary
Ghostwriter, a suspected Russia-backed hacking group, has compromised websites and email accounts in Latvia, Lithuania, and Poland to publish fabricated documents pushing anti-North Atlantic Treaty Organization (NATO) narratives consistent with Kremlin talking points. The influence campaign started in 2017.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In September 2019, a cyber incident occurred in Kaunas, Lithuania where the attacker Ghostwriter used message manipulation to carry out a sabotage act. According to FireEye's report on the incident, the motive for the attack was to disrupt the city's operations and cause confusion among its residents.
The attack began with Ghostwriter sending fake messages to Kaunas officials, posing as a legitimate source. These messages contained false information about upcoming events or changes in policies, which were designed to create panic and confusion. As a result of these messages, city employees became confused and disrupted their work, causing delays and mistakes in the delivery of services to residents.
Ghostwriter's technique was highly sophisticated, using social engineering tactics to gain the trust of Kaunas officials. The attacker used personal information about city employees to make the messages appear legitimate, adding a layer of realism to their deception. FireEye notes that Ghostwriter's use of message manipulation in this incident was particularly concerning due to its potential for widespread disruption and exploitation.
The impact of the attack on Kaunas was significant, with city services being delayed or interrupted as a result of the confusion caused by Ghostwriter's messages. The report notes that while no sensitive information was compromised during the attack, it highlighted the vulnerability of cities to cyber threats and the need for increased vigilance in protecting against such attacks.
The September 2019 Kaunas incident demonstrates the potential for cyber attacks to cause significant disruption and harm to urban areas. Ghostwriter's use of message manipulation tactics underscores the importance of cybersecurity measures that can detect and prevent these types of threats in real-time. Cities must remain vigilant in protecting against such attacks, ensuring their systems are secure and resilient against evolving cyber threats.