MIT TRACE

MIT CTL Logo
Back to Main Dashboard

Compromised Russian government statistics widget alters and disrupts multiple agency websites

On 8 March 2022, attackers compromised a shared visitor-statistics widget within a Russian government website-monitoring service maintained by the Russian Ministry of Economic Development. Because the external resource was embedded in numerous federal agency websites, it displayed attacker-controlled content and temporarily blocked access to online information services of the Energy Ministry, Federal Penitentiary Service, Federal Bailiff Service, Federal Antimonopoly Service, Federal State Statistics Service and Culture Ministry. The Russian Digital Development Ministry reported that the issue was contained and service restored within an hour.

71

Estimated severity

71 / 100

90

Source reliability

90 / 100

Approximate Date

2022-03-08

Targeted Company

RUSSIAN MINISTRY OF ECONOMIC DEVELOPMENT

Targeted Company Supply Chain Impact

  1. Distribution & Fulfillment

  2. Procurement & Sourcing

  3. Production & Manufacturing

  4. Sales (Retail & Ecommerce)

  5. Warehousing

  6. Service Delivery

  7. Unrecognized Impact

Supply Chain Relations

RUSSIAN FEDERAL ANTIMONOPOLY SERVICE (IT service provider)RUSSIAN FEDERAL BAILIFF SERVICE (IT service provider)RUSSIAN FEDERAL PENITENTIARY SERVICE (IT service provider)RUSSIAN FEDERAL STATE STATISTICS SERVICE (IT service provider)RUSSIAN MINISTRY OF CULTURE (IT service provider)RUSSIAN MINISTRY OF ENERGY (IT service provider)

Geographic Impact

Country Targeted Company

Russian Federation

RUS

Other Affected Countries

No other affected countries reported

Target country

Russian Federation

Affected countries

Russian Federation

Impacted regions

No information

Operational Impact

Duration

No information

Financial impact (USD M)

No information

Impact types

Service degradationService unavailabilitySupply chain data integrity impact

Affected sectors

Government & Public Administration

Affected departments

Information Technology

Attack Profile

Attack types

Data modificationSoftware supply chain compromiseUnauthorized access

Attributed threat actors

No information

Sources

Please rotate your phone

MIT TRACE is optimized for landscape orientation on mobile.