Nodex

History

2024: Damage to infrastructure by hackers and complete data destruction

One of the oldest Russian Internet providers and hosting operators Nodex was subjected to a large-scale cyber attack on January 7, 2025, as a result of which the company's network infrastructure was completely destroyed and confidential data was stolen.

According to CNews, the attack was carried out by the Ukrainian Cyberalyans group, which provided screenshots of the virtual infrastructure of VMware, Veeam Backup and Hewlett Packard Enterprise, to which they gained access during the hack, as evidence.

𝓲

Фото: Freepik

Nodex, which has been operating in the market since April 2001, officially confirmed the attack through a group on the social network Vkontakte"." The company announced the start of restoring systems from backups, but the exact timing of the resumption of work has not been announced.

By January 8, 2025, the provider managed to partially restore the network core and launch a DHCP server, which allowed some subscribers to return access to the Internet. However, most customers are still without communication, and the official website of the company is not available.

According to the ISP Review portal, Nodex provides Internet access, web hosting and telephony services. The company called the restoration of the work of telephony and a call center for communication with customers a priority task.

Ukrainian Cyberalyans, formed in 2016 by combining several hacker groups, including FalconsFlame, Trinity, RUH8 and CyberHunta, has previously announced hacking of various Russian organizations. Among their goals were, Ministry of Defence Russia the Institute, CIS regional ministries and. MEDIA

In October 2023, the same group attacked Trigona ransomware servers, stealing their databases, source code and cryptocurrency wallets. The hackers are registered as a non-governmental organization and openly declare their activities.

According to the attackers, they not only stole the data, but also destroyed all backups. However, this contradicts Nodex reports of the start of recovery from backups, which indicates that some of the backups may be saved.^[1]

Notes