After a little time away, we’re back and sharing the official target lists from the IT Army of Ukraine. Want to know how to join the fight? Fire up Tor, then sign into your VPN, then go here: https://t.me/itarmyofukraine2022/439

Now, as usual, everything below except the headlines is a copy/paste from the official Telegram channel for the ITAU, which has over 200,000 subscribers right now, down from more than 400,000 at the start of the Russian invasion. That makes it effectively the largest hacktivist action in history. New target lists are announced every few days, and the Ukrainian DDoS software is automatically updated with target lists.

Announcement

We managed to keep down the main page of unistream.ru (https://unistream.ru/) for three days. It is a Russian money transfer service. The transfer calculation was broken hence transfers did not come through. The domestic DDoS solution laid down hence they had to block subnetworks manually. That was the reason you could oversee with traffic or connectivity at MHDDOS_Proxy. The blocking issues was experienced by real users either.

You did it great and we tend to take a look on another popular money transfer services koronapay.com (https://api.koronapay.com/) and yoomoney.ru (https://yoomoney.ru/). The sanctions implied on Russia are good but often worked around. Should we help them out?

❓First time here? Read here (https://t.me/itarmyofukraine2022/439) or ask our @itarmyhelper_bot how to join.

—

У нас вийшло на 3 дні вивести з ладу головну форму unistream.ru (https://unistream.ru/) російського сервісу переказу грошей онлайн, що не дозволило розраховувати суму переказу і як результат зробити його. Їх відчизняний DDoS захист не витримав нашої атаки через що росіянам довелося блокувати підмережі вручну. Через це виникали проблеми з трафіком або з’єднаннями в MHDDOS_Proxy. Проблеми через таке недбале блокування відчули й реальні користувачі.

Такий позитивний результат змушує нас привернути увагу на інші популярні онлайн сервіси переказу грошей в росії – koronapay.com (https://koronapay.com/) та yoomoney.ru (https://yoomoney.ru/). Західні антиросійські санкції це добре, але росіяни зазвичай обходять їх. Виправимо це?

❓Тут вперше? Прочитай (https://t.me/itarmyofukraine2022/439) або запитай нашого @itarmyhelper_bot як приєднатися до активних дій.

—

Target List

https://koronapay.com
194.85.18.32 (443/tcp)
https://app.koronapay.com
151.101.1.195 (443/tcp)
https://applink.koronapay.com
194.85.18.32 (443/tcp)
https://api.koronapay.com
194.85.18.31 (443/tcp)

https://yoomoney.ru
185.71.78.222 (80/tcp, 443/tcp)
109.235.165.222 (80/tcp, 443/tcp)
http://fl.yoomoney.ru
185.17.9.131 (80/tcp)
185.17.9.134 (80/tcp)
185.17.9.144 (80/tcp)
185.17.9.146 (80/tcp)
185.17.9.147 (80/tcp)
185.17.9.153 (80/tcp)
https://ocsp.yoomoney.ru
https://cacerts.yoomoney.ru
185.71.78.57 (80/tcp, 443/tcp)
109.235.165.195 (80/tcp, 443/tcp)
http://certs.yoomoney.ru
185.71.78.100 (80/tcp)
109.235.165.126 (80/tcp)
Https://shop.yoomoney.ru
109.235.165.101 (80/tcp, 443/tcp)
185.71.78.144 (80/tcp, 443/tcp)
https://jobs.yoomoney.ru
185.215.4.0 (80/tcp, 443/tcp)
https://zakupki.yoomoney.ru
185.215.4.10 (80/tcp, 443/tcp)
https://3ds-gate.yoomoney.ru
109.235.165.87 (80/tcp, 443/tcp)
185.71.78.124 (80/tcp, 443/tcp)

Categories: Cyber, Cyberwar, DDoS, Death by 1000 Needles, IT Army of Ukraine, OpIronFall, OpRussia, Politics, Russia, Ukraine, War