{ "id": "9285f8a9-d20b-4635-b4ea-478e27eefcb3", "created_at": "2026-04-06T00:21:41.796171Z", "updated_at": "2026-04-10T03:24:52.172556Z", "deleted_at": null, "sha1_hash": "2c230f88025c8ae42c454a5e12a968ba06481209", "title": "CyberBerkut", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 324807, "plain_text": "CyberBerkut\r\nBy Contributors to Wikimedia projects\r\nPublished: 2014-04-03 · Archived: 2026-04-05 21:18:47 UTC\r\nFrom Wikipedia, the free encyclopedia\r\nCyberBerkut\r\nresembles emblem of special police unit \"Berkut\"\r\nFormation c. 2014\r\nType Virtual community;Voluntary association\r\nPurpose Internet activism;Internet vigilantism\r\nRegion served Ukraine\r\nMembership Unknown\r\nWebsite cyber-berkut.ru or cyber-berkut.org\r\nCyberBerkut (Russian: КиберБеркут, Ukrainian: КіберБеркут) is a modern organized group of pro-Russian\r\nhacktivists.\r\n[1]\r\n The group became locally known for a series of publicity stunts and distributed denial-of-service\r\n(DDoS) attacks on Ukrainian government, and western or Ukrainian corporate websites.[2] By 2018, this group\r\nwas accused by western intelligence agencies, such as National Cyber Security Centre (United Kingdom) of being\r\nlinked to the GRU, providing plausible deniability.\r\n[3]\r\nhttps://en.wikipedia.org/wiki/CyberBerkut\r\nPage 1 of 4\n\nThe group emerged after the dissolution of special police force \"Berkut\" that became notorious for its violent\r\nrepression used during the EuroMaidan demonstrations.[4] The group is anonymous.[citation needed] Their\r\nproclaimed goals are fighting against neo-fascism, neo-nationalism and arbitrary power in Ukraine.\r\n[citation needed]\r\nTo further this aim, CyberBerkut activists targeted the \"Right Sector\" IT resources.[citation needed] CyberBerkut\r\ntargets included NATO, and its allies.[5]\r\nAttacks on NATO websites.[6][7]\r\nAttacks on U.S. private military companies.\r\n[8]\r\nPublication of correspondence of deputies of (political parties) Batkivshchyna and Ukrainian Democratic\r\nAlliance for Reform.\r\n[9]\r\nPublication of correspondence with the United States Embassy in Ukraine and United States foundations.\r\n[10]\r\nDisclosure to public of telephone recording between Yulia Tymoshenko and Nestor Shufrych.\r\n[11][nb 1]\r\nDisclosure to public of telephone recording between EU High Representative for Foreign Affairs Catherine\r\nAshton and Foreign Minister of Estonia Urmas Paet.\r\n[13]\r\nBlocking cellular phones of members of the Yatsenyuk Government and persons close to them.[14]\r\nBlocking Internet resources of Secretary of the National Security and Defence Council of Ukraine Andriy\r\nParubiy and news portals: LigaBusinessInform and Ukrainian Independent Information Agency.\r\n[15]\r\nPublication of video materials that are blocked on YouTube.\r\n[1]\r\nAttempts at disrupting the recruitment of the National Guard of Ukraine.\r\n[citation needed]\r\nAttempted destruction of the electronic system of the Central Election Commission of Ukraine prior to the\r\n2014 Ukrainian presidential election.\r\n[citation needed]\r\nPublishing lists of alleged Ukrainian military deserters[citation needed]\r\nAttempts at disrupting the work of the Central Election Commission of Ukraine by damaging the IFES\r\nsystem before the elections and blocking cellphones of their organisators.[16][17]\r\nTemporary disruption of the websites of the Ministry of Internal Affairs and the General Prosecutor of\r\nUkraine. Websites of TV channels 1+1 and Inter were also temporary disrupted [citation needed].\r\nEmail hacking and publication of the conversation between Ihor Kolomoyskyi and the persecutor of the\r\nLviv Oblast, hacking of the computer and email of a person related to Ihor Kolomoyskiy.\r\n[18][19][20]\r\nArchives of the contents of 89 email accounts of Lviv oblast's prosecutor office employees.\r\nHacking and publishing of the Minister of Internal Affairs Arsen Avakov's conversation.[21]\r\nBlocking of the website of the President of Ukraine Petro Poroshenko on 29 June 2014.[22]\r\nPublication of the real name and biography of Semen Semenchenko – Konstantin Grishin.[23]\r\nHacking of the German Chancellery and the German Bundestag[24][5]\r\nHacked U.S. Senator John McCain's computers during a visit to Ukraine in 2015 and released a video\r\ndepicting a fake ISIS beheading video being filmed[25]\r\nThe group also publishes pro-Donetsk People's Republic videos.[1] In one of them it is claimed that Ukrainian\r\nsecurity forces are living under a \"Jewish occupation\".[1]\r\nhttps://en.wikipedia.org/wiki/CyberBerkut\r\nPage 2 of 4\n\nRepeated blocking of CB's Facebook pages, although new ones have been made on the following day\r\n[citation needed]\r\n.\r\nLikely in response to attacking the websites of Greystone Limited and Triple Canopy, CyberBerkut's\r\nwebsites have been temporarily disrupted. The websites started to work again on the following day.\r\n[citation\r\nneeded]\r\nArrests of people suspected in relation to CyberBerkut.[26]\r\nHacktivism\r\nInternet activism\r\nHacker (term)\r\nDenial-of-service attack\r\nTrolls from Olgino\r\nAnonymous (group)\r\n1. ^ Tymoshenko claimed that the recording had been deliberately edited to discredit her.\r\n[12]\r\n1. ^ Jump up to: a\r\n \r\nb\r\n \r\nc\r\n \r\nd\r\n Inside a pro-Russia propaganda machine in Ukraine, BBC News (13 November 2017)\r\n2. ^ \"Ukraine conflict: Hackers take sides in virtual war\". BBC News. 2014-12-20. Retrieved 2020-10-20.\r\n3. ^ Sherman, Justin. \"Russia's Cyber Threat to Ukraine Is Vast—and Underestimated\". Wired. ISSN 1059-\r\n1028. Retrieved 2022-06-06.\r\n4. ^ Ukraine's Berkut police: What makes them special?, BBC News (25 February 2014)\r\n5. ^ Jump up to: a\r\n \r\nb\r\n Wagstyl, Stefan (7 January 2015). \"Ukraine separatists claim cyber attack on German\r\ngovernment sites\". Financial Times.\r\n6. ^ \"NATO websites targeted in attack claimed by Ukrainian hacker group Cyber Berkut\". ABC News. 16\r\nMarch 2014. Retrieved 18 February 2015.\r\n7. ^ jenny. \"Ukrainian Hacker Group CyberBerkut Launched a DDoS-attack on NATO\". revolution-news.com. Archived from the original on 24 February 2015. Retrieved 18 February 2015.\r\n8. ^ \"CyberBerkut takes vengeance on American private military com\". Pastebin. Retrieved 18 February\r\n2015.\r\n9. ^ \"Anonymous Ukraine Claims to hack and leak secret email conversations of Vitali Klitschko's UDAR\r\nparty\". HackRead. 13 February 2014. Retrieved 18 February 2015.\r\n10. ^ Jeffrey Carr. \"Digital Dao\". Retrieved 18 February 2015.\r\n11. ^ \"Телефонный разговор между Шуфричем и Тимошенко. 18 марта 2014 года в 23:17 по\r\nукраинскому времени\". YouTube. 24 March 2014. Retrieved 18 February 2015.\r\n12. ^ \"Tymoshenko admits speaking to Shufrych, says her words about Russians were edited\". Interfax-Ukraine. Retrieved 18 February 2015.\r\n13. ^ Piret Pernik: teine taktika, sama strateegia (in Estonian)\r\n14. ^ Eduard Kovacs (17 March 2014). \"Three NATO Websites Disrupted by Ukrainian Hackers of Cyber\r\nBerkut\". softpedia. Retrieved 18 February 2015.\r\n15. ^ NATO websites hit in cyber attack linked to Crimea tension.\r\n16. ^ \"На сайте проводят регламентные работы технического характера в преддверии дня выборов.\r\nТакие работы проводились и ранее, в прошлые выборы. Работы проводятся, чтобы увеличить\r\nhttps://en.wikipedia.org/wiki/CyberBerkut\r\nPage 3 of 4\n\nработоспособность сайта и увеличить его скорость\", — сообщил РИА Новости пресс-секретарь\r\nкомиссии Константин Хивренко.\r\n17. ^ \"CNews: Õàêåðû çàÿâèëè îá óíè÷òîæåíèè ÈÒ-ñèñòåìû ÖÈÊ Óêðàèíû çà 2 äíÿ äî âûáîðîâ ïðåçèäåíòà\".\r\nCNews.ru. Retrieved 18 February 2015.\r\n18. ^ \"\"КиберБеркут\": Коломойский спонсировал части Нацгвардии на юго-востоке\". 25 May 2014.\r\nRetrieved 2 August 2017.\r\n19. ^ \"\"Life.ru\" — информационный портал\". Life.ru. Retrieved 2 August 2017.\r\n20. ^ \"КиберБеркут утверждает: на Украине готовится военный переворот\". Retrieved 2 August 2017.\r\n21. ^ правды», Дарья ИВАШКИНА | Сайт «Комсомольской (22 April 2014). \"Хакеры заявили, что\r\nвзломали переписку Авакова об убийстве Сашко Билого\". kp.ru -. Retrieved 2 August 2017. {{cite\r\nweb}} : CS1 maint: multiple names: authors list (link) CS1 maint: numeric names: authors list (link)\r\n22. ^ \"ТАСС: Международная панорама - Организация \"Киберберкут\" заблокировала сайт президента\r\nУкраины\". ТАСС. Retrieved 18 February 2015.\r\n23. ^ \"Хакеры узнали настоящее имя командира батальона \"Донбасс\"\". Вести.ру. 30 July 2014.\r\n24. ^ Cyber-Angriff auf Kanzleramt und Bundestag, Die Welt, 7 January 2015.\r\n25. ^ \"McCain: Russian Internet trolls say I staged ISIS executions\". 13 July 2015. Retrieved 10 June 2024.\r\n26. ^ \"СБУ задержала организацию хакеров \"Киберберкут\" - за попытку срыва выборов президента\".\r\nfinance.ua. Archived from the original on 27 May 2014. Retrieved 18 February 2015.\r\nOfficial website\r\nCyberBerkut on Facebook\r\nCyberBerkut on X\r\nCategories:\r\nAnonymity\r\nCyberattacks\r\nHacker groups\r\nInformation society\r\nIntellectual property activism\r\nInternet trolling\r\nInternet vigilantism\r\nOrganizations established in 2014\r\nOrganizations of the Russo-Ukrainian war\r\n2014 establishments in Russia\r\nRusso-Ukrainian cyberwarfare\r\nCyberattack gangs\r\nSource: https://en.wikipedia.org/wiki/CyberBerkut\r\nhttps://en.wikipedia.org/wiki/CyberBerkut\r\nPage 4 of 4", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://en.wikipedia.org/wiki/CyberBerkut" ], "report_names": [ "CyberBerkut" ], "threat_actors": [ { "id": "afb851c4-b2e8-40e3-ac37-c55d8c0ab3cd", "created_at": "2022-10-25T16:07:23.516432Z", "updated_at": "2026-04-10T02:00:04.637109Z", "deleted_at": null, "main_name": "Cyber Berkut", "aliases": [ "Kiberberkut" ], "source_name": "ETDA:Cyber Berkut", "tools": [], "source_id": "ETDA", "reports": null }, { "id": "268479f9-6666-488e-a41e-14593ed4c2f7", "created_at": "2023-01-06T13:46:38.614508Z", "updated_at": "2026-04-10T02:00:03.039929Z", "deleted_at": null, "main_name": "Cyber Berkut", "aliases": [], "source_name": "MISPGALAXY:Cyber Berkut", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434901, "ts_updated_at": 1775791492, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/2c230f88025c8ae42c454a5e12a968ba06481209.pdf", "text": "https://archive.orkl.eu/2c230f88025c8ae42c454a5e12a968ba06481209.txt", "img": "https://archive.orkl.eu/2c230f88025c8ae42c454a5e12a968ba06481209.jpg" } }