Russian Government Websites Hit by Major DDoS Attack Russia’s internet regulator, Roskomnadzor, and the Defense Ministry confirmed a large-scale distributed denial-of-service (DDoS) attack last week that temporarily disrupted access to key government websites. The attack, described as a "complex multi-vector" operation, targeted servers belonging to Roskomnadzor, the Defense Ministry, and the Main Radio Frequency Center (GRFC), which oversees telecommunications monitoring and internet restrictions. The assault originated from botnets and servers primarily located in Russia, as well as the U.S., China, the U.K., and the Netherlands. While Roskomnadzor stated the attack was contained on Friday, reports of ongoing access issues persisted through the weekend and into Monday, according to internet monitoring service DownDetector. DDoS attacks flood targeted systems with excessive traffic, rendering websites unavailable to legitimate users. No group has claimed responsibility, and the attackers remain unidentified. The incident occurs amid heightened digital restrictions in Russia, with Roskomnadzor recently blocking Telegram for alleged non-compliance with local laws and moving to impose tighter controls on WhatsApp over similar concerns. The regulator plays a central role in enforcing internet censorship and surveillance in the country.

INTERPOL-Led Operation Disrupts Cybercrime Networks Across Africa, Recovers $3 Million A month-long global law enforcement effort, Operation Sentinel, led by INTERPOL and involving 19 African nations, has resulted in the arrest of 574 suspects and the recovery of $3 million in stolen funds. Conducted between October 27 and November 27, 2025, the operation targeted business email compromise (BEC), digital extortion, and ransomware schemes plaguing the continent. Participating countries—including Nigeria, Ghana, South Africa, Kenya, and 15 others—took down over 6,000 malicious links, decrypted six ransomware variants, and dismantled cybercriminal infrastructure responsible for estimated losses exceeding $21 million. Among the key actions: - Ghanaian authorities arrested 10 suspects linked to a ransomware attack on an unnamed financial institution, which encrypted 100 terabytes of data and stole $120,000. The same operation also dismantled a cross-border fraud network (operating in Ghana and Nigeria) that defrauded 200+ victims of $400,000 using fake fast-food websites and apps. - Benin’s law enforcement seized 43 malicious domains and 4,318 social media accounts used for extortion, leading to 106 arrests. - 100 digital devices and 30 fraudulent servers were confiscated during raids. "The scale and sophistication of cyber attacks across Africa are accelerating, especially against critical sectors like finance and energy," warned Neal Jetton, INTERPOL’s Director of Cybercrime. The operation falls under the African Joint Operation against Cybercrime (AFJOC), an initiative to bolster regional law enforcement capabilities. ### Ukrainian Ransomware Affiliate Pleads Guilty in U.S. Separately, Artem Aleksandrovych Stryzhak, a 35-year-old Ukrainian national, pleaded guilty in the U.S. for his role in Nefilim ransomware attacks as an affiliate. Arrested in Spain in June 2024 and extradited in April 2025, Stryzhak admitted to conspiring in double-extortion schemes, where victims were pressured to pay ransoms or face public leaks of stolen data via the Corporate Leaks site. Stryzhak gained access to Nefilim’s ransomware code in June 2021 in exchange for 20% of his ransom proceeds. He and co-conspirators targeted companies in the U.S., Canada, and Australia with annual revenues exceeding $200 million, using databases to assess victims’ financial standing. His sentencing is scheduled for May 6, 2026, with a potential 10-year prison term. The case follows the September 2025 indictment of Volodymyr Viktorovich Tymoshchuk, another Ukrainian national accused of administering LockerGoga, MegaCortex, and Nefilim ransomware between 2018 and 2021. Tymoshchuk remains at large, with a $11 million reward offered for information leading to his arrest. He is wanted by both the FBI and EU, with Nefilim’s victims spanning multiple countries, including the U.S., Germany, and Norway.