I Russia’s flagship airline, Aeroflot, has been thrown into disarray following a cyber-attack claimed by a pro-Ukrainian hacking collective. More than 40 flights were cancelled, including domestic routes and international ones to Belarus and Armenia, after the carrier’s digital systems were disrupted. Passengers also faced major delays due to what the airline described as a technical issue affecting its information infrastructure.
A hacker group identifying itself as Silent Crow took responsibility for the breach, stating that it collaborated with the Belarusian group known as Cyber Partisans. In a message posted to Telegram, Silent Crow declared that it had conducted a "prolonged and large-scale operation" that it claimed completely dismantled Aeroflot’s IT systems. The group ended their post with a bold message of solidarity: “Glory to Ukraine! Long live Belarus!” Cyber Partisans echoed this stance, stating on their own platform that they were aiding Ukraine in its struggle against what they termed the occupying force, by hitting Russia’s largest airline with a paralyzing cyber strike.
The full scope and depth of the attack are still unclear, but the impact was significant enough that Russia’s prosecutor’s office confirmed a cyberattack had occurred, prompting the launch of a criminal investigation. The country’s transport ministry announced that affected passengers would be rebooked onto flights operated by alternative carriers.
A prominent Russian lawmaker, Anton Gorelkin, acknowledged the incident in a public statement, characterizing it as part of a broader campaign against the country. He emphasized that the conflict being waged against Russia extends beyond the physical battlefield and includes cyber warfare.
While hacker groups often amplify their claims to attract attention and undermine morale, this incident stands out because of the immediate, tangible consequences for thousands of civilians and the airline itself. According to observers, many such groups are composed of volunteers whose goals range from activism to psychological operations. Though some describe themselves as "hacktivists," there are persistent suspicions that several have links to intelligence services from the countries they support.
Silent Crow’s collaboration with Cyber Partisans adds a further layer to the complexity of digital activism in the context of the war. Cyber Partisans, active since 2022, are known for their opposition to the Belarusian government and its support of Russia. The group describes itself as a highly structured collective working toward the liberation of Belarus from authoritarian rule. Their alignment with Ukrainian interests in the cyber domain underscores the increasingly international dimensions of the digital battleground.
Since Russia’s large-scale invasion of Ukraine in early 2022, numerous cyber-attacks have occurred across both nations, often targeting infrastructure, communications, and transport networks. This latest event, however, stands out as a rare example of a cyber-attack with immediate public visibility and impact. While Russian cities frequently experience travel disruption due to drone strikes and air defense activity, this time, the chaos stemmed from a cyber intrusion—yet another indication that the war is being fought on multiple, increasingly sophisticated fronts.
Earlier this month, Russia’s main airports around Moscow saw hundreds of flights grounded in response to drone assaults, again affecting tens of thousands of people. These disruptions illustrate the growing vulnerability of civilian logistics and infrastructure during wartime, with digital operations becoming just as potent as physical attacks. As the war drags on, both sides are clearly investing heavily in cyber capabilities—not just to disrupt but also to signal, intimidate, and sway public perception. Whether Silent Crow’s threat to leak the personal data of all Aeroflot passengers materializes remains uncertain, but it has already sparked significant alarm within Russian circles.
The fallout from this particular breach is still unfolding, and while authorities investigate the full extent of the damage, Aeroflot and its customers are left grappling with the immediate consequences of this digital assault.