Loading story…
Russian missile strikes on Ukrainian data-center and telecommunications infrastructure reportedly caused temporary outages at torrent trackers 1337x and NordicQuality. 1337x, widely regarded as one of the largest torrent-tracking sites, reported a “Direct Destruction of Server” outage before returning online; the disruption was attributed to physical damage rather than a conventional DDoS attack.
The precise hosting providers used by the trackers could not be independently determined, as such services often rely on CDNs and intermediaries. Reports identified multiple Ukrainian infrastructure providers as affected around Kyiv, including Virtual Systems, MiroHost Ukraine, CosmoNova, DataGroup, CityHost, KyivStar, and reportedly Vodafone Ukraine; several operators moved services to other Ukrainian regions or abroad to maintain availability.
See attribution, scope, and your downstream exposure.
4 events from the most recent confirmed update back to the earliest known activity.
Virtual Systems reported that strikes on September 23 temporarily took down both of its facilities amid attacks affecting Ukrainian digital infrastructure around Kyiv.
MiroHost Ukraine was reportedly destroyed, while CosmoNova, DataGroup, CityHost, KyivStar, and reportedly Vodafone Ukraine were cited as affected by strikes. Several affected providers moved operations to other Ukrainian regions or abroad.
Russian military strikes on Ukrainian data-center and telecommunications infrastructure reportedly caused temporary outages at 1337x and NordicQuality. Both trackers subsequently returned online, while their specific hosting providers could not be determined.
Torrent tracker 1337x had been subjected to DDoS attacks for months before the later reported physical infrastructure disruption.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcetorrentfreak.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Russian drone strikes damaged commercial data-center and telecommunications infrastructure in Kyiv, disrupting connectivity for roughly **100,000 households**. At least four providers—Kyiv Link, Pautina, Utels, and Crazy Network—reported outages or degraded service caused by damage to facilities, critical equipment, communications lines, and a traffic-exchange site. A strike on a Datagroup data center in Kyiv’s central business district also killed four people in the surrounding area. Russia acknowledged targeting the Datagroup site and said it struck or sought facilities associated with New-Telco, United DC, Kyivstar, and Parkovyi, alleging links to Ukrainian military or security services; those claims were not independently verified. Ukrainian officials said the country’s decentralized network architecture should prevent nationwide failure, but warned that localized outages could impair air-raid alerts and other essential civilian services. Some companies have begun moving data abroad in response to the heightened risk.
Sep 26, 2026
Russian-linked cyber operations hit Ukraine at the outset of the invasion with both destructive malware and a major satellite communications disruption. Security researchers identified the **HermeticWiper** data-wiping malware on hundreds of systems in Ukraine, with additional impacts reported at a Ukrainian financial institution and government contractors in Latvia and Lithuania. The activity coincided with **DDoS** attacks against Ukrainian government entities and PrivatBank, underscoring a coordinated effort to degrade communications and critical services as military operations began. A parallel attack on Viasat’s **KA-SAT** network knocked 40,000 to 45,000 satellite modems offline, many of them permanently, after attackers compromised a VPN-connected management center in Turin and pushed wiper malware through a software update server. Viasat later said the incident unfolded in two stages, with a second wave using compromised modems to flood company systems and complicate recovery; the disruption spilled into Europe, including outages affecting **5,800 Enercon wind turbines in Germany**. U.S. and EU officials attributed the operation to Russian hackers, and the investigation helped support sanctions announced in 2022.
Jun 29, 2026
Ukrainian government, military, banking, and energy targets were repeatedly disrupted by cyber operations tied to Russia and the war around Ukraine. Reports describe attacks on a Ukrainian power station, outages affecting the websites of Ukraine’s defense ministry and major banks, and broader disruptive activity against the country’s financial sector. The UK government later said technical analysis by the National Cyber Security Centre assessed that Russia’s **GRU** was almost certainly involved in the February 2022 distributed denial-of-service attacks on Ukrainian banking targets, framing the incidents as part of continued Russian aggression. The campaign also expanded beyond Ukraine through both state-linked and pro-Russian actors. **Killnet**, a Russia-aligned hacktivist group, claimed retaliatory **DDoS** attacks on Lithuanian government and business websites after restrictions affecting transit to Kaliningrad, while other reporting said Russian-backed actors continued destructive operations against Ukraine, including **wiper malware** and attempted power-grid attacks. At the same time, pro-Ukrainian hackers mounted hack-and-leak operations against Russian institutions, underscoring how the conflict evolved into a broader regional cyber confrontation affecting governments, critical infrastructure, and financial services.
Jun 29, 2026