The Security Service of Ukraine has established that the December attack on Kyivstar mobile operator was carried out by the SandWorm hacker group, which is a regular unit of the Russian GRU. This was reported by Illia Vitiuk, Head of the SBU Cyber Security Department.

"We are working to announce suspicions in accordance with our legislation and further transfer these cases to the International Criminal Court. War criminals should be tried at the international level," the official said.

According to Vitiuk, the body is currently conducting a number of examinations of the systems affected by the hackers and the damage caused. He said that, in particular, requests for additional information have been sent to international partners.

The Head of the Cyber Security Department emphasized that all the participants of the vertical who were involved in the attack on Kyivstar are being questioned as part of the criminal proceedings.

Vitiuk emphasized that "not only a particular hacker should be held accountable for what he did, but also at least the head of the military unit, as well as the leadership of the special service that carried out the destructive activities."

He added that there are only three cases in the world where hackers have been served with suspicion notices for cyberattacks on infrastructure, and one of them was the result of the SBU.