Cyberattacks during the 2008 South Ossetia war

The website of the Parliament of Georgia (parliament.ge) had its content replaced with a montage of photos depicting Mikheil Saakashvili and Adolf Hitler. The Russian-language caption reads, "He too will come to an end as well." ^[1]

During the 2008 South Ossetia war a series of cyberattacks swamped and disabled websites of numerous South Ossetian, Russian, Georgian, and Azerbaijani organisations.^[2]

Details

On 5 August 2008, three days before Georgia launched its invasion of South Ossetia, the websites for OSInform News Agency and OSRadio were hacked. The OSinform website at osinform.ru kept its header and logo, but its content was replaced by a feed to the Alania TV website content. Alania TV, a Georgian government supported television station aimed at audiences in South Ossetia, denied any involvement in the hacking of the websites. Dmitry Medoyev, at the time the South Ossetian envoy to Moscow, claimed that Georgia was attempting to cover up information on events which occurred in the lead up to the war.^[3]

One such cyber attack caused the Parliament of Georgia and Georgian Ministry of Foreign Affairs websites to be replaced by images comparing Georgian president Mikheil Saakashvili to Adolf Hitler.^[4] Other attacks involved denials of service to numerous Georgian and Azerbaijani websites,^[5] such as when Russian hackers allegedly disabled the servers of the Azerbaijani Day.Az news agency.^[6] The governments of Estonia, Ukraine, and Poland offered technical assistance and mirrored web pages for Georgian websites to use during the attacks.^[7][8][9]

Analysis

While Day.az claimed that Russian intelligence services conducted the denial-of-service attacks (DDoS) on Georgian informational and governmental websites through a proxy in this period,^[6] the Russian government denied the allegations, stating that it was possible that individuals in Russia or elsewhere had taken it upon themselves to start the attacks.^[5] Others^[who?] asserted that the St. Petersburg-based criminal gang known as the Russian Business Network (RBN) was behind many of these cyber attacks on Georgian and Azerbaijani sites,^[10] as it was for the attacks on Estonia in 2007.^[11]

In 2008, Gadi Evron, the former chief of Israel's Computer Emergency Response Team, believed the attacks on Georgian internet infrastructure resembled a cyber-riot, rather than cyber-warfare.^[12] Security researchers from Greylogic concluded that Russia's GRU and the FSB were likely to have played a key role in co-coordinating and organizing the attacks.^[13]
Both these viewpoints are valid according to research by John Bumgarner a former intelligence officer and member of the United States Cyber Consequences Unit (US-CCU). Bumgarner’s research
concluded that the first-wave of cyberattacks against Georgian targets were synchronized with Russian military operations and that a second-wave was conducted by Russian sympathizers. ^{[14] [15]}

See also

• 2007 cyberattacks on Estonia
• Cyxymu

References

1. ^ Moses, Asher (12 August 2008). "Georgian websites forced offline in 'cyber war'". Sydney Morning Herald. http://www.smh.com.au/news/technology/georgian-websites-forced-offline-in-cyber-war/2008/08/12/1218306848654.html. Retrieved 26 January 2009. 
2. ^ Keizer, Gregg (12 August 2008). "Cyber attacks knock out Georgia's Internet presence". MIS-Asia. http://mis-asia.com/news/articles/cyber-attacks-knock-out-georgias-internet-presence. Retrieved 26 January 2009. 
3. ^ "S.Ossetian News Sites Hacked". Tbilisi: Civil Georgia. 5 August 2008. http://www.civil.ge/eng/article.php?id=18896. Retrieved 26 January 2009. 
4. ^ Wentworth, Travis (12 August 2008). "You’ve Got Malice: Russian nationalists waged a cyber war against Georgia. Fighting back is virtually impossible.". Newsweek. http://www.newsweek.com/id/154965. Retrieved 26 January 2009. 
5. ^ ^{a b} Markoff, John (13 August 2008). "Before the Gunfire, Cyberattacks". The New York Times. http://www.nytimes.com/2008/08/13/technology/13cyber.html?em. Retrieved 26 January 2009. 
6. ^ ^{a b} Today.az (11 August 2008). Russian intelligence services undertook large scale attack against Day.Az server
7. ^ Georgia: Regional Reporters
8. ^ Estonia, Google Help 'Cyberlocked' Georgia (Updated)
9. ^ Estonia, Poland Help Georgia Fight Cyber Attacks
10. ^ Georgia States Computers Hit By Cyberattack
11. ^ The hunt for Russia's web crims - Security - Technology - theage.com.au
12. ^ Waterman, Shaun (18 August 2008). "Analysis: Russia-Georgia cyberwar doubted". Middle East Times. http://www.metimes.com/Security/2008/08/18/analysis_russia-georgia_cyberwar_doubted/1a29/. Retrieved 2009-03-24. ^{[dead link]}
13. ^ Leyden, John (23 March 2009). "Russian spy agencies linked to Georgian cyber-attacks". The Register. http://www.theregister.co.uk/2009/03/23/georgia_russia_cyberwar_analysis/. Retrieved 24 March 2009. 
14. ^ Brian Prince (18 August 2009). "Cyber-attacks on Georgia Show Need for International Cooperation, Report States". eWeek. http://www.eweek.com/c/a/Security/Cyber-Attacks-on-Georgia-Show-Need-for-International-Cooperation-Report-States-294120/. Retrieved 1 November 2011. 
15. ^ Mark Rutherford (18 August 2009). "Report: Russian mob aided cyberattacks on Georgia". cNet. http://news.cnet.com/8301-13639_3-10312708-42.html. Retrieved 1 November 2011.