On August 8, 2024, the Kursk region in Russia was struck by a significant distributed denial-of-service (DDoS) attack amid heightened tensions following a surprise Ukrainian incursion. The attack targeted a range of critical online services, including government and business websites, as well as infrastructure systems, causing temporary disruptions. Internet monitoring service NetBlocks reported sporadic disruptions in connectivity around Kursk, correlating with the DDoS activities.
According to Russia’s digital ministry, the assault involved an unprecedented volume of traffic, peaking at over 100,000 junk requests per second. While DDoS attacks can escalate to millions of requests per second, the ministry stated that their systems were able to handle the influx. Despite the scale of the attack, the ministry assured that the e-government infrastructure remained intact and secure, with no unauthorized access to user data reported.
The source of the attack remains undetermined, though the IP addresses involved were primarily registered in Germany and the UK. DDoS attacks often utilize distributed networks, which complicates tracing the precise origin of the attack. No specific hacker group has claimed responsibility for this incident, leaving its origins speculative at this time.
This attack is one of the most substantial cyber offensives against Kursk since the onset of the full-scale war nearly three years ago. It coincides with reports of Ukrainian military advances into the region, where authorities have declared a “state of emergency” and described the situation as “very difficult.” The White House has not confirmed whether U.S. assistance played a role in the Kursk operation but remains focused on supporting Ukraine’s defense capabilities against ongoing Russian aggression.
Reference: