Cyberattack hits Ukraine as U.S. warns Russia preparing 'pretext for invasion'

The United States said it feared Russia was preparing a pretext to invade Ukraine if diplomacy fails to meet its objectives, after a massive cyberattack splashed Ukrainian government websites with a warning to "be afraid and expect the worst."

Kyiv's state security service says hack shows sign of Moscow involvement

A soldier for the self-proclaimed Donetsk People's Republic is seen in a trench at the line of separation near Yasne village controlled by Russia-backed separatists in eastern Ukraine on Friday. The U.S. says it's concerned that Russia is preparing for the possibility of a new military assault in the region. (Alexander Ermochenko/Reuters)

The United States said it feared Russia was preparing a pretext to invade Ukraine if diplomacy fails to meet its objectives, after a massive cyberattack splashed Ukrainian government websites with a warning to "be afraid and expect the worst."

Moscow dismissed such warnings, though it has amassed more than 100,000 troops along its border and on Friday released pictures of more of its forces on the move.

The cyberattack — which Kyiv's state security service said showed signs of Russian involvement — unfolded hours after security talks wrapped up on Thursday with no breakthrough between Moscow and Western allies.

Ukraine said its president, Volodymyr Zelensky, had proposed a three-way meeting with the leaders of Russia and the United States. Zelenskiy's chief of staff, Andriy Yermak, said the "life and death" of his country hung in the balance.

White House press secretary Jen Psaki told reporters the United States was concerned that Russia was preparing for the possibility of a new military assault on a country it invaded in 2014.

White House Press Secretary Jen Psaki talks to reporters at the White House on Friday. (Chip Somodevilla/Getty Images)

"As part of its plans, Russia is laying the groundwork to have the option of fabricating a pretext for invasion, including through sabotage activities and information operations, by accusing Ukraine of preparing an imminent attack against Russian forces in eastern Ukraine," Psaki said.

A U.S. official said the United States had information that indicated Russia had already positioned a group of operatives to conduct "a false-flag operation" in eastern Ukraine.

Kremlin spokesperson Dmitry Peskov dismissed such reports as based on "unfounded" information, TASS news agency reported.

Russia denies plans to attack Ukraine but says it could take unspecified military action unless its demands — including a promise by the NATO alliance never to admit Kyiv — are met.

Foreign Minister Sergei Lavrov said that Russia hoped security talks with the United States would resume but that this would depend on Washington's response to Moscow's proposals.

Russian Foreign Minister Sergei Lavrov speaks during a news conference in Moscow on Friday. (Dimitar Dilkoff/Pool/AP)

"We categorically will not accept the appearance of NATO right on our borders, especially so given the current course of the Ukrainian leadership," he said.

Asked what Moscow meant by threatening this week to take "military-technical action" if talks fail, Lavrov said: "Measures to deploy military hardware, that is obvious. When we take decisions with military hardware we understand what we mean and what we are preparing for."

Russian Defence Ministry footage released by RIA news agency showed armoured vehicles and other military hardware being loaded onto trains in Russia's far east, in what Moscow called an inspection drill to practise long-range deployments.

"This is likely cover for the units being moved towards Ukraine," said Rob Lee, a military analyst and a fellow at the U.S.-based Foreign Policy Research Institute.

'Expect the worst'

Ukrainian officials were investigating the cyberattack, which they said hit around 70 internet sites of government bodies including the security and defence council.

Ukraine's state security service, SBU, said it saw some signs pointing to the involvement of hacker groups associated with the Russian intelligence services.

A spokesperson for the White House National Security Council said it was not yet clear who was responsible. "We are in touch with the Ukrainians and have offered our support," the spokesperson said.

The Ukrainian Foreign Ministry building in Kyiv is seen in this undated photo. The country's Foreign Ministry website was one of a number of government sites brought down temporarily in a hacking attack Friday. (Ukrainian Foreign Ministry Press Service/The Associated Press)

Russia did not comment, but has previously denied being behind cyberattacks, including against Ukraine.

"Ukrainian! All your personal data was uploaded to the public network. All data on the computer is destroyed, it is impossible to restore it," said a message visible on hacked government websites, written in Ukrainian, Russian and Polish.

"All information about you has become public, be afraid and expect the worst. This is for your past, present and future."

A laptop screen displays a warning message in Ukrainian, Russian and Polish that appeared on the official website of the Ukrainian Foreign Ministry after a massive cyberattack on Friday. (Valentyn Ogirenko/Reuters)

The message was peppered with references that echoed long-running Russian state allegations, rejected by Kyiv, that Ukraine is in thrall to far-right nationalist groups.

The Ukrainian government said it had restored most of the affected sites and no personal data had been stolen.

NATO responded by announcing that it would sign a new agreement within days with Kyiv on closer cooperation in cyberdefence, including giving Ukraine access to the Western military alliance's system for sharing information on malicious software.

A Ukrainian Military Forces member walks in a trench on the frontline with Russia-backed separatists in the Donetsk region on Tuesday. (Anatolii Stepanov/AFP/Getty Images)

Secretary-General Jens Stoltenberg said in a statement that NATO experts were already working with the Ukrainian authorities to respond to the attack.

The European Union's top diplomat, Josep Borrell, said the EU's political and security committee and cyberunits would meet to see how to help Kyiv.

"I can't blame anybody as I have no proof, but we can imagine," he said.

On the streets of Ukraine, there was growing resignation to the prospect of renewed fighting. Kyiv resident Ruslan Kavatsyuk, 39, said he saw the cyberattack as a "positive," since it would stiffen the resolve of the Ukrainian public.

"It reminds us that we live during military times, that Russia is an enemy who will kill us physically," he said.


To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.

Become a CBC Member

Join the conversation  Create account

Already have an account?