"Prepared for years and spent millions of dollars": Cyberexpert rated the attack on Kyivstar

Konstantin noted that the team responsible for Kyivstar's cybersecurity is one of the most powerful in Ukraine, but even it could not eliminate the attack. In this, the expert sees nothing wrong, because, in his opinion, anyone can break anyone-a question only in the amount of resources, money, specialists and time.

Moreover, large -scale caberpections have been prepared for months, sometimes even years, and require the use of methods of social engineering, botnet, expensive highly specialized specialists, even more valuable expanses. All this can spend millions of dollars on break, Konstantin Korsun emphasized. "So such attacks are expensive artificial goods, it can not be massive. I personally do not expect similar scenarios from other Ukrainian operators.

They are attacked hundreds of times a day 24/7, just public information. Other critical infrastructure is obligatory will be attacked, only "when" and "what will be the consequences", - the expert wrote. The expert said that in the modern world of fractures - a commonplace. The main thing, he believes, prepare for consequences and for their minimization, develop spare and emergency plans - - This is "a modern professional approach.

" The voice "restore relatively quickly, data transmission - later, everything else - then. You can restore almost all infrastructure, even if the rocket flew to the Date Center so that people are not injured, "-summed up the expert. " Kyivstar "and other operators and providers of Ukraine regularly reflect hacker attacks by the Russian Federation and continue work precisely because they are private because they are private Companies are their advantage.

"The Ukrainian Internet access industry is almost completely private and is not yet regulated by the state, which retains amazing restorative capacity. So, "Kyivstar Nationalization" is a bad idea, "Korsun wrote. Constantine also gave several recommendations to those cybersecurity who work to eliminate problems with Kyivstar.

Ciso of large companies I would advise you to change passwords of access to the domain controller now, to the corporate VPN, to plot everything that will be shot, and then order an audit of infrastructure safety. This is first and foremost. And then conduct training with staff and separately specialized cybersecurity training for IT professionals. Because quite often an IT specialist is not versed in cybersecurity.