Cyber-attack on Unified state information system on prevention and counteraction to legalization (laundering) of the proceeds from crime, terrorist financing and the financing of proliferation of weapons of mass destruction

On 15.03.2017 the SFMS documented a cyber-attack on the Unified state information system on prevention and counteraction to legalization (laundering) of the proceeds from crime, terrorist financing and the financing of proliferation of weapons of mass destruction (UIS).
Thus, e-mails from perpetrators disguised as a state authority, which performs daily interaction with the SFMS, were received by the mail system (including all email addresses) of the State Financial Monitoring Service of Ukraine, located in the Internet segment of UIS. Messages had been sent from different e-mail addresses, mail servers of which are located around the world, but were disguised as official e-mails of state authorities. During an attempt to open such an e-mail, an archive, containing malicious software (javascript) and carrying out the encryption of documents on user’s storage media, was introduced to the user"s computer.
In the Internet segment of UIS, the information, concerning which there are no requirements for limiting access under the legislation, is being processed.
A comprehensive information protection system implemented in UIS (CIPS UIS) has provided an opportunity to block the main influx of threats and restore damaged management information. There was no information leakage. UIS continues to work in the usual routine mode.
Information, that the SFMS obtains from the reporting entities, due to the implemented CIPS UIS, has not come under the cyber-attack.
The mentioned cyber-attack is particularly of high concern in the context of coordination of work on preparation for on-site visit by the MONEYVAL experts, which will be in Ukraine next week within the framework of the 5th round of evaluation of the national system of counteraction to laundering (legalization) of the proceeds from crime, terrorist financing and the financing of proliferation of weapons of mass destruction.
Pursuant to the current legislation, the incident was reported to the Administration of the State Service for Special Communication and Information Protection of Ukraine, which is the central body of the executive power with special status, that ensures development and implements the national policy in the areas of organizing special communications, information protection, telecommunications and use of radio frequency resource of Ukraine, and to the Ministry of Finance of Ukraine, which is the central body of the executive power, that develops and ensures implementation of the state policy in the area of prevention and counteraction to legalization (laundering) of the proceeds from crime or terrorist financing.

Press Service of the SFMS
presa@sdfm.gov.ua
www.sdfm.gov.ua