Cyber Incident Victim: Vyberi Radio Group
Date:
Jun 2022
Location:
Russia
Summary
Anonymous targeted Vyberi Radio, a Russian radio network operating approximately 100 stations with over 8 million listeners, as part of its ongoing Operation Russia campaign. The hacktivist group leaked an 823 GB archive containing 1.5 million emails from the company, mirroring similar data breaches against other Russian entities during this operation. The incident occurred alongside distributed denial-of-service attacks against Belarusian government websites in retaliation for support of Russia's military actions. This activity formed part of a broader offensive involving multiple compromised organizations and data leaks distributed through the DDoSecrets platform.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The Vyberi Radio cyber incident occurred in early June 2022 as part of Anonymous' sustained #OpRussia campaign against Russian entities following the invasion of Ukraine. Between June 1-3, 2022, the hacktivist collective compromised Vyberi Radio's digital infrastructure and exfiltrated 823 gigabytes of internal company data containing approximately 1.5 million emails. This breach was coordinated with attacks against two other Russian organizations - RKP Law firm and Metprom Group - with all three data leaks published through the DDoSecrets transparency platform. The attackers, using aliases B00da and Porteur, specifically targeted Vyberi Radio's email communications system, though the exact intrusion vector remained unspecified in available reports. The radio network, which operates approximately 100 stations across 18 Russian cities reaching over 8 million listeners, had its corporate communications exposed without prior public warnings from the attackers.
The data leak represented one of the final major actions during a slowing phase of Operation Russia after months of intensive cyber activity against Russian targets. While immediate operational disruptions to Vyberi Radio's broadcasting capabilities weren't documented, the exposure of 1.5 million internal emails created significant reputational and operational risks for the media group. The breach occurred alongside Anonymous' DDoS attacks against Belarusian government websites in retaliation for Belarus' support of Russia's military actions. No containment measures or restoration efforts by Vyberi Radio were described in available reporting, nor were specific details provided about compromised systems beyond the email archive. The incident formed part of a broader pattern where Anonymous systematically targeted Russian commercial entities with strategic importance across media, legal services, and industrial sectors during the initial phase of the Ukraine conflict.