Russian Military Intelligence Members Indicted Over Ukraine Cyberattack

The indictment unsealed on Thursday comes as the United States expands its hunt for Russia’s most elite cyberwarriors.

Listen to this article · 5:43 min Learn more

Share full article

President Vladimir V. Putin of Russia on Wednesday. The attacks were essentially the opening salvos in the invasion of Ukraine.

The United States expanded its hunt on Thursday for Russia’s most elite cyberwarriors, indicting five members of the country’s military intelligence agency for attacks on Ukraine and American companies in the run-up to the invasion of Ukraine in 2022.

The State Department and American allies also offered a reward of up to $60 million for their arrests; the reward for Osama bin Laden and other leaders of Al Qaeda after the Sept. 11, 2001, attacks was $25 million.

The attacks, known as “Whisper Gate,” on Ukraine’s government agencies, NATO countries and American firms were essentially the opening salvos in the invasion of Ukraine. They were intended to cripple the government, bring down a major satellite communications network and scare off NATO nations from coming to Kyiv’s aid. But the attacks were countered by U.S. Cyber Command and firms like Microsoft, Google and Amazon, who moved the operations of the Ukrainian government to the cloud and kept the country running in a remarkable digital defense operation.

“The Whisper Gate attack in January of 2022 could be considered the first shot of the war,” said William J. DelBagno, the F.B.I.’s special agent in charge of the Baltimore field office. “The cybercriminals sent a message with their malware to, quote, be afraid and expect the worst. A month later, Russia physically invaded the country.”

The investigation to take down the Russian hackers, officials said, was called “Operation Toy Soldiers.” The Russian G.R.U. operatives were part of Unit 29155, officials said, a group that for years has worked to destabilize Europe.

In the hours before the invasion in February 2022, it was Microsoft’s warning to the White House about a gathering digital storm, meant to blind Ukraine, that provided another warning that tanks were getting ready to roll.

We are having trouble retrieving the article content.

Please enable JavaScript in your browser settings.

Thank you for your patience while we verify access. If you are in Reader mode please exit and log into your Times account, or subscribe for all of The Times.