Hackers disrupt Aeroflot operations, dozens of flights canceled amid cyber attack

Two pro-Ukraine hacking groups have claimed responsibility for cyber attacks on Russian flag carrier Aeroflot that forced the company to cancel dozens of round-trip flights recently.

 

In a Telegram statement, Aeroflot said it had experienced a “technical failure” that led to the cancellation and rescheduling of several flights since Monday, including key domestic routes like Moscow, St. Petersburg, and Sochi. The airline also confirmed that some flights planned for later in the week were canceled.

 

“Passengers can follow up-to-date information on the flight status on the online boards of the websites and information boards of the departure airports. Information on the current status of the situation is also published in the main section of the Aeroflot website and in the airline’s official Telegram channels and social networks,” Aeroflot said.

 

The airline added that passengers affected by the cancellations will be offered refunds or ticket reissues once services resume.

 

Although Aeroflot described the incident as a technical failure, two pro-Ukrainian hacker groups, Silent Crow and the Belarusian Cyber-Partisans, claimed responsibility for the attack. Both groups have a history of targeting critical infrastructure in Russia and Belarus through cyber operations.

 

On its Telegram channel, Silent Crow claimed that the cyberattack had completely compromised and destroyed Aeroflot’s IT infrastructure. The group also stated it had stolen the airline’s entire database, including flight history, audio recordings of internal communications, surveillance data, and information related to staff monitoring systems.

 

Silent Crow further claimed it had maintained access to Aeroflot’s corporate network for over a year, gradually expanding its presence within the airline’s infrastructure.

 

“Restoration will likely require tens of millions of dollars. The damage is strategic,” the group said.

 

The Belarusian Cyber-Partisans also confirmed the cyberattack on their Telegram channel, stating it was carried out in coordination with Silent Crow.

 

“We help Ukrainians fight the occupier, paralyse the largest airline of the Russian Federation and impose a colossal financial loss,” reads the translated post.