How Russian Hackers Crippled Ukraine’s Kropiva, Trembita and Sonata
Russian hackers from Berkut RF reportedly disabled Ukraine’s Kropiva and Trembita systems, disrupting military targeting and communications across the front.
Russian hackers from the Berkut RF group have disabled key military software used by the Ukrainian army, targeting several core systems including the «Kropiva» and «Trembita» platforms.
According to the Telegram channel SHOT, the Kropiva app is widely used by Ukrainian troops to carry out strikes on populated areas in Donbass and on border regions of Russia. With this software, Ukrainian forces select targets, access detailed maps, satellite imagery and firing coordinates. SHOT reported that Russian hackers have effectively «blinded» Ukrainian reconnaissance by knocking out the military software that Kiev relied on to coordinate strikes on Russian territory.
Trembita, meanwhile, is described as one of the main elements of Ukraine’s IT infrastructure, designed to support digital interaction between government agencies, citizens and businesses. SHOT noted that both systems have been out of service for nearly a week due to the hackers’ actions, which has already led to what it called a complete breakdown in coordination between Ukrainian units.
The report also recalls that Russian hackers previously managed to compromise the Sonata messenger, used as one of the key communication channels of the Ukrainian Armed Forces. Citing the Telegram channel Mash, it states that Ukrainian servicemen used Sonata to relay information on troop movements and report the situation at the front. The hack was carried out despite the fact that the Ukrainian command used individual QR codes to activate the program, which personnel were strictly forbidden to share with anyone.