{"id":833161,"date":"2025-03-11T08:11:57","date_gmt":"2025-03-11T13:11:57","guid":{"rendered":"https:\/\/newsycanuse.com\/index.php\/2025\/03\/11\/if-ips-for-x-cyberattack-emerge-in-ukraine-what-does-it-mean-about-the-origin-of-attack\/"},"modified":"2025-03-11T08:11:57","modified_gmt":"2025-03-11T13:11:57","slug":"if-ips-for-x-cyberattack-emerge-in-ukraine-what-does-it-mean-about-the-origin-of-attack","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2025\/03\/11\/if-ips-for-x-cyberattack-emerge-in-ukraine-what-does-it-mean-about-the-origin-of-attack\/","title":{"rendered":"If IPs for X cyberattack emerge in Ukraine, what does it mean about the origin of attack?"},"content":{"rendered":"
\n

Tech billionaire Elon Musk<\/a> on March 10 claimed that his social media platform X (formerly known as Twitter), was under a massive cyberattack. In a post he emphasised that this attack was significant, writing: \u201cWe get attacked every day, but this was done with a lot of resources. Either a large, coordinated group and\/or a country is involved. Tracing \u2026\u201d<\/p>\n<\/div>\n

\n

Then, speaking to Fox Business Network the same day, Elon Musk told the channel that the cyberattacker’s<\/a> IP addresses had been \u201ctraced\u201d to Ukraine. He did not elaborate or give other details.<\/p>\n<\/div>\n

\n

So, we see what experts feel about the issue if IP addresses were traced back to Ukraine<\/a>\u2026 does that mean the disruption originated from Ukraine?<\/p>\n<\/div>\n

\n

X Down, IPs Traced to Ukraine: What Do Experts Say?<\/h2>\n

According to an AP report, cybersecurity<\/a> experts dismissed the idea that tracing the IP address meant you had found the definitive source of the attack. They pointed out that IP addresses don’t necessarily indicate the origin of an attack.<\/p>\n<\/div>\n

\n

Writing on social media platform Bluesky, security researcher Kevin Beaumont said that Elon Musk<\/a>‘s claim about the Ukraine origin is \u201cmissing a key fact \u2014 it was actually IPs from worldwide, not just Ukraine.\u201d<\/p>\n<\/div>\n

\n

Beaumont noted that the cyberattack was conducted using the Mirai variant botnet, which uses compromised cameras. From his expertise, speaking about who is likely behind the attack, he pointed to teens saying, \u201cSmells of APTs \u2014 advanced persistent teenagers.\u201d<\/p>\n<\/div>\n

\n

Does IPs Being Traced to Ukraine Mean the Cyberattack Originated in Ukraine?<\/h2>\n

The AP report also cited Allan Liska from cybersecurity company Recorded Future, who cast doubt that IP addresses pin point origin. He said that even if \u201cevery IP address that hit Twitter<\/a> today originated from Ukraine (doubtful), they were most likely compromised machines controlled by a botnet run by a third party that could be located anywhere in the world.\u201d<\/p>\n<\/div>\n

\n

Further, Nicholas Reese, an adjunct instructor at the Center for Global Affairs in New York University\u2019s School of Professional Studies and expert in cyber operations told AP the possibility of definitively verifying Elon Musk’s claims without technical data from X is \u201cpretty low\u201d. He also noted that a state actor being behing the disruption \u201cdoesn’t make a lot of sense\u201d as the attack lasted a few short hours.<\/p>\n<\/div>\n

\n

Reese explained to AP, \u201cThere are kind of two types of cyberattacks<\/a> \u2014 there are ones that are designed to be very loud and there are ones that are designed to be very quiet. And the ones that are usually the most valuable are the ones that are very quiet. Something like this was designed to be discovered. So to me that almost certainly eliminates state actors. And the value that they would have gained from it is pretty low.\u201d<\/p>\n<\/div>\n

\n

Background: What Happened?<\/h2>\n

Users on X began complaining about being unable to access the site from around 6 am ET in the US, with reports of outtages surging to over 40,000 at 10 am, as per data on tracking website Downdetector. By noon, the reports dropped to the \u201clow thousands\u201d, the AP report noted.<\/p>\n<\/div>\n

Read More<\/a>
\n Dion Mayoral<\/p>\n","protected":false},"excerpt":{"rendered":"

Tech billionaire Elon Musk on March 10 claimed that his social media platform X (formerly known as Twitter), was under a massive cyberattack. In a post he emphasised that this attack was significant, writing: \u201cWe get attacked every day, but this was done with a lot of resources. Either a large, coordinated group and\/or a<\/p>\n","protected":false},"author":1,"featured_media":833162,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31066,3613],"tags":[],"class_list":{"0":"post-833161","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyberattack","8":"category-emerge"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/833161","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=833161"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/833161\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/833162"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=833161"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=833161"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=833161"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}