Loading story…
Hackers reportedly breached Belarusian Railway systems and disrupted services in an apparent effort to slow the movement of Russian troops through Belarus. The attack was attributed in public reporting to activist-aligned operators who said they encrypted servers, databases, and workstations while sparing automation and safety systems to avoid endangering passengers. Ticketing and freight operations were reportedly affected, and the attackers demanded the release of political prisoners and the withdrawal of Russian forces from Belarusian territory.
The incident unfolded amid heightened regional tensions and concerns that Belarusian infrastructure could be used to support Russian military deployments near Ukraine. Public reports said the railway acknowledged technical problems with online services, while the attackers framed the operation as a politically motivated act of sabotage against military logistics rather than a conventional financially driven ransomware campaign.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
A reported cyberattack targeted Belarus Railway with the stated aim of slowing the movement of Russian troops. The reference indicates the attack had allegedly already occurred by the time of publication.
Apple released a supplemental update for macOS High Sierra 10.13.2 to address the Spectre vulnerability. This is the only concrete event indicated by the reference.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ukrainian government, military, banking, and energy targets were repeatedly disrupted by cyber operations tied to Russia and the war around Ukraine. Reports describe attacks on a Ukrainian power station, outages affecting the websites of Ukraine’s defense ministry and major banks, and broader disruptive activity against the country’s financial sector. The UK government later said technical analysis by the National Cyber Security Centre assessed that Russia’s **GRU** was almost certainly involved in the February 2022 distributed denial-of-service attacks on Ukrainian banking targets, framing the incidents as part of continued Russian aggression. The campaign also expanded beyond Ukraine through both state-linked and pro-Russian actors. **Killnet**, a Russia-aligned hacktivist group, claimed retaliatory **DDoS** attacks on Lithuanian government and business websites after restrictions affecting transit to Kaliningrad, while other reporting said Russian-backed actors continued destructive operations against Ukraine, including **wiper malware** and attempted power-grid attacks. At the same time, pro-Ukrainian hackers mounted hack-and-leak operations against Russian institutions, underscoring how the conflict evolved into a broader regional cyber confrontation affecting governments, critical infrastructure, and financial services.
Jun 29, 2026
A cyberattack disrupted operations at **Vladimir Bread Factory**, a major bakery producer in Russia’s Vladimir region, after attackers hit the company’s internal digital environment overnight on Sunday. The incident knocked out office IT, including computers, servers, electronic document management tools, and the widely used **1C** enterprise accounting system, forcing the company to revert to **manual order and shipment processing** and move office staff to a round-the-clock schedule. While production lines and bakeries reportedly continued operating at full capacity, the outage significantly complicated order processing and deliveries, contributing to localized delivery failures and temporary shortages of the company’s bakery products. The attacker identity and incident type (e.g., ransomware vs. other intrusion) were not confirmed, and the company did not provide a timeline for full restoration of affected systems. Reporting also noted this incident in the context of broader cyber-related disruptions in Russia’s food sector, including a prior attack that disabled the country’s animal-based product certification platform (triggering paper-based workarounds and logistics delays) and a separate ransomware incident affecting a large dairy processing plant in southern Siberia in early 2025, which local media speculated may have been linked to the plant’s reported support for Russian troops in Ukraine (without official attribution).
Jun 29, 2026
Italian authorities said they blocked Russian-linked cyberattacks aimed at websites tied to the Winter Olympics, preventing disruption as organizers prepared for the games. The activity revived concerns first underscored by the 2018 Winter Olympics opening ceremony attack, when a destructive operation sought to interrupt a high-profile international sporting event and demonstrated how cyber operations can be used to undermine global broadcasts, logistics, and public confidence. Threat intelligence reporting also described a broader surge in hacktivist activity ahead of the 2026 Winter Olympics, alongside protests and suspected sabotage risks. The combined reporting indicates that Olympic infrastructure, public-facing sites, and related organizations faced a heightened threat environment in which politically motivated actors and state-linked operators appeared poised to use cyberattacks to disrupt services, shape narratives, and embarrass host institutions.
Jul 4, 2026