Cyber special forces attacked Lithuanian state resources and critical infrastructure due to the ban on railway transportation of Russian goods. The campaign was triggered by Vilnius’ refusal to allow steel and iron ore to pass through Kaliningrad.
On June 21, the group identified multiple targets for coordinated DDoS attacks. The goals were distributed among the “units”, which consist of volunteers. Cyber Special Forces regularly recruit new participants who have the necessary resources to carry out DDoS attacks.
The Group uses economical means and methods for DDoS attacks on resources, websites and IoT devices of various states. The main purpose of Cyber Special Forces attacks is a short-term shutdown or temporary unavailability of a resource for the victim to malfunction.
The list of targets represented critical infrastructure resources in Lithuania. The targets for the attack included:
- logistics companies (Adrem, Talga);
- transport infrastructure (Transimeksa, Kelprojektas);
- major Lithuanian financial institutions (Central Bank, Stock Exchange, Swedbank, SEB, etc.);
- Internet service providers (Tele2, Telia, Penki, Mezon, Cgates, Fastlink);
- airports (Vilnius Airport, Kaunas Airport, Palanga Airport, Siauliai Airport);
- energy companies (Ignitis Grupe, Ministry of Energy, Aedilis);
- major media (Delfi, Nedelia, ZW);
- government websites (President, Foreign Ministry, Ministry of Justice, Police).
On June 2, Cyber Special Forces created a new division “Sparta”. The scope of responsibility of the new unit includes cyberdiversion, disruption of Internet resources, data theft and financial intelligence focused on NATO, its members and allies. The created division is an official part of the “Killnet Collective” group.