Russian drone attack
An emergency crew responds to a Russian drone attack in Odesa, Ukraine, on June 10, 2023. Image: State Emergency Service of Ukraine

Ukrainian hacktivists claim to breach Russian drone developer

Ukrainian hackers claim to have breached the Russian drone developer Albatross, leaking 100 gigabytes of data, including internal documentation, technical data and drawings of various types of unmanned aerial vehicles.

A group calling itself Cyber Resistance said it shared the documents with the international volunteer community InformNapalm, which conducts investigations based on data leaks.

InformNapalm released a report on Monday analyzing the Albatross data. Not all of the obtained data made it into the report — some of the information couldn’t be disclosed because “it has been used for several months” by Ukraine’s military, the hackers said.

“We will only share such information with those who will use it effectively,” Cyber Resistance wrote on its Telegram channel. Recorded Future News was not able to immediately corroborate the claim or verify the authenticity of the leaked data. It is unclear where the hackers are based, but they communicate publicly in Ukrainian.

Earlier in August, the group collaborated with InformNapalm on an investigation based on leaked emails from a senior Russian politician who was allegedly involved in money laundering and sanction evasion schemes.

Albatross leaks

In its analysis, InformNapalm said that the documents leaked from the Russian drone developer Albatross confirm, among other things, the previous findings about the company's involvement in the development of Iran-designed Shahed drones, which Russia deployed against Ukraine during the ongoing war.

Last year, the Financial Times reported that Russia covertly partnered with Iran to transform its agricultural drone developer, Albatross, into a manufacturer of military UAVs. The company was sanctioned by the U.S. last December.

InformNapalm also claims that the Cyber Resistance leak unveils fresh details about Albatross operations, such as the identities of those engaged in assembling Russia-made Iranian drones, along with insights into the workings of the Russian special economic zone Alabuga — a purported hub of the Iran-supported effort to enhance Russia’s drone manufacturing capabilities.

The InformNapalm investigation contains screenshots of leaked documents, maps, and photos of people allegedly related to the Albatross operation.

This is not the first time pro-Ukrainian hackers claimed to breach Russian drone manufacturers. Earlier in February, the hacker group known as Belarusian Cyber Partisans said they gained access to internal correspondence, employee data, and the locations of military training sites of another Russian drone developer, Orlan. The hackers claimed they handed this data to Ukrainian intelligence, which refused to comment on it.

Ukraine's cybersecurity officials previously acknowledged that the intelligence they obtain during cyberattacks aids the ground operations of the armed forces. Sometimes, they credit local hackers for seizing this data.

Not much is known about the Cyber Resistance group's operation and its links to the government. The group calls itself a “hacktivist team” and claims to have been cooperating with InformNapalm, as well as Ukrainian security forces, since 2014. The group frequently publishes investigations based on its hacks on its Telegram channel, which has 10,000 followers.

Get more insights with the
Recorded Future
Intelligence Cloud.
Learn more.
No previous article
No new articles

Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.