{"id":44973,"date":"2022-01-25T03:14:31","date_gmt":"2022-01-25T03:14:31","guid":{"rendered":"http:\/\/7b30e43a-68c0-4482-bef1-d05e48c17bd2"},"modified":"2022-01-25T03:14:31","modified_gmt":"2022-01-25T03:14:31","slug":"belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/","title":{"rendered":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" class=\"ff-og-image-inserted\"><\/div>\n<p>An activist group in Belarus launched a ransomware attack against the country&#8217;s railway system in protest of Belarus President Alexander Lukashenko and Russian troop movements through the country.&nbsp;<\/p>\n<p>On Monday, The Belarusian Cyber-Partisans <a href=\"https:\/\/twitter.com\/cpartisans\/status\/1485618881557315588\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">took to Twitter<\/a> to say they encrypted the networks of Belarusian Railways, crippling the system and disrupting ticket sales. The group criticized Lukashenko and provided a list of demands in exchange for the encryption keys needed to unlock the system.&nbsp;<\/p>\n<p>&#8220;At the command of the terrorist Lukashenko, <a href=\"https:\/\/twitter.com\/hashtag\/Belarusian?src=hashtag_click\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">#Belarusian<\/a> Railway allows the occupying troops to enter our land. We encrypted some of BR&#8217;s servers, databases and workstations to disrupt its operations. Automation and security systems were NOT affected to avoid emergency situations,&#8221; the group said.&nbsp;<\/p>\n<p>&#8220;We have encryption keys, and we are ready to return Belarusian Railroad&#8217;s systems to normal mode. Our conditions: Release of the 50 political prisoners who are most in need of medical assistance. Preventing the presence of Russian troops on the territory of #Belarus.&#8221;<\/p>\n<figure class=\"media-source\">\n<div class=\"twitterContainer\" readability=\"6.5181058495822\">\n<blockquote class=\"twitter-tweet\" readability=\"6.9526462395543\">\n<p lang=\"en\" dir=\"ltr\">We have encryption keys, and we are ready to return Belarusian Railroad&#8217;s systems to normal mode. Our conditions:<br \/>\ud83d\udd3a Release of the 50 political prisoners who are most in need of medical assistance.<br \/>\ud83d\udd3aPreventing the presence of Russian troops on the territory of <a href=\"https:\/\/twitter.com\/hashtag\/Belarus?src=hash&amp;ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer\" target=\"_blank\" data-component=\"externalLink\">#Belarus<\/a>. <a href=\"https:\/\/t.co\/QBf0vtcNbK\" rel=\"noopener noreferrer nofollow\" target=\"_blank\" data-component=\"externalLink\">https:\/\/t.co\/QBf0vtcNbK<\/a><\/p>\n<p>\u2014 Belarusian Cyber-Partisans (@cpartisans) <a href=\"https:\/\/twitter.com\/cpartisans\/status\/1485618881557315588?ref_src=twsrc%5Etfw\" rel=\"noopener noreferrer\" target=\"_blank\" data-component=\"externalLink\">January 24, 2022<\/a><\/p><\/blockquote><\/div>\n<\/figure>\n<p>Yuliana Shemetovets, a Belarusian activist and spokesperson for the group, told <em>ZDNet<\/em> that their goal was to disrupt the railway system &#8220;so it can indirectly affect the Russian troops using it for their purposes (potential attack on Ukraine).&#8221;&nbsp;<\/p>\n<p>According to <a href=\"https:\/\/www.washingtonpost.com\/world\/2022\/01\/24\/ukraine-eu-us-embassy-russia\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">The Washington Post<\/a>, the Belarusian Defense Ministry said on Monday that Russian troops were coming to the country for military exercises. Russia is also sending 12 Su-35 fighters, two S-400 battalions and a Pantsir-S air defense system to Belarus as part of the troop movement, but US officials said it was all part of a Russian plan to invade Ukraine from the north.&nbsp;<\/p>\n<p>&#8220;[Belarusian Cyber-Partisans] don&#8217;t want Russian soldiers in Belarus since it compromises the sovereignty of the country and puts it in danger of occupation. It also pulls Belarus into a war with Ukraine. And probably Belarusian soldiers would have to participate in it and die for this meaningless war,&#8221; Shemetovets said.&nbsp;<\/p>\n<section class=\"sharethrough-top placeholder\"> <\/section>\n<p>Shemetovets explained that the group encrypted the bulk of the railway&#8217;s servers, databases and workstations. They first gained access to the railway&#8217;s systems in December.&nbsp;<\/p>\n<p>&#8220;The backups have been destroyed. Dozens of databases have been attacked, including AS-Sledd, AS-USOGDP, SAP, AC-Pred, <a href=\"https:\/\/t.co\/gozy48AeHn\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">http:\/\/pass.rw.by<\/a>, uprava, IRC, etc. Automation and security systems were deliberately not affected by a cyber attack in order to avoid emergency situations,&#8221; Shemetovets added.&nbsp;<\/p>\n<p>Shemetovets noted that the attack did affect some Belarusians trying to use the train system&#8217;s ticket platform and said they would work to restore the system so average citizens were not affected. The Belarusian Railways website&nbsp;<a href=\"https:\/\/pass.rw.by\/en\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">was back online<\/a> by Monday night.&nbsp;<\/p>\n<p>&#8220;We received so far only positive feedback (people that were writing to us are ready to put up with it a little so the major goal is achieved). The major target was freight trains but it looks like the passenger schedules were also affected,&#8221; Shemetovets said.<\/p>\n<p>&#8220;The government refused to make any comments. We need to wait a little longer to see how it actually affected them. As long as Lukashenko&#8217;s dictatorship regime stays CPs will continue their work.&#8221;&nbsp;<\/p>\n<p>The government did not respond to requests for comment and has not released a statement about the situation. But Belarusian Railways did <a href=\"https:\/\/www.rw.by\/corporate\/press_center\/news_of_passengers\/2022\/01\/vnimaniyu-passazhirov_24012022\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">issue a statement<\/a> acknowledging the issue and said any web resources or services &#8220;issuing electronic travel documents&#8221; are temporarily unavailable. They added that they are working to restore the system and urged customers to contact their offices for travel documents.&nbsp;<\/p>\n<p>Since <a href=\"https:\/\/www.dw.com\/en\/belarus-protests-one-year-on-lukashenko-in-command-and-striking-back\/a-58793285\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">protests against Lukashenko<\/a> began in 2020, the Belarusian Cyber-Partisans have worked to undermine the dictatorship by leaking hacked documents showing widespread corruption and police abuse. The group is made up of former IT workers from Belarus, according to profiles by <a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2021-08-24\/belarus-hackers-seek-to-overthrow-local-government\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Bloomberg<\/a>, <a href=\"https:\/\/www.technologyreview.com\/2021\/08\/26\/1033205\/belarus-cyber-partisans-lukashenko-hack-opposition\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">The MIT Technology Review<\/a> and <a href=\"https:\/\/www.washingtonpost.com\/world\/europe\/belarus-hack-cyber-partisans-lukashenko\/2021\/09\/14\/5ad56006-fabd-11eb-911c-524bc8b68f17_story.html\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">The Washington Post<\/a>.<\/p>\n<p>Ransomware experts told ZDNet that they had never seen ransomware used in this way before. Emsisoft threat analyst Brett Callow said he was not aware of any situation where ransomware was deployed like this.<\/p>\n<p>&#8220;In terms of helping hactivists achieve their objectives, ransomware is as effective, perhaps more effective, than any other tool in their arsenal. And, of course, the entry barriers are lower than ever thanks to both user credentials and off-the-shelf ransomware being readily available,&#8221; Callow said,&nbsp;<\/p>\n<p>Recorded Future&#8217;s Allan Liska echoed those remarks, telling <em>ZDNet<\/em> he had never seen anything like this before.&nbsp;<\/p>\n<p>&#8220;This reminds me a bit of the escalation we saw with the Red Brigades kidnappings in the 70s and 80s. What started as simple kidnappings escalated to more radical behavior and assassination. Ransomware has evolved from encrypting single machines to whole networks and the the types of extortion demanded has continued to evolve,&#8221; Liska said.<\/p>\n<p>&#8220;This could be the next jump in the evolution of ransomware, or it could be an outlier.&#8221;<\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/belarusian-activists-launch-cyberattack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Belarusian Cyber-Partisans demanded the release of 50 political prisoners and the removal of all Russian troops from the country.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-44973","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-25T03:14:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge\",\"datePublished\":\"2022-01-25T03:14:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/\"},\"wordCount\":871,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/9735c91dd1eab373240849bfaf1dd5a721ce1870\\\/2020\\\/09\\\/20\\\/7c31ea14-2046-4522-a267-607e581c82a1\\\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/\",\"name\":\"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/9735c91dd1eab373240849bfaf1dd5a721ce1870\\\/2020\\\/09\\\/20\\\/7c31ea14-2046-4522-a267-607e581c82a1\\\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"datePublished\":\"2022-01-25T03:14:31+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/9735c91dd1eab373240849bfaf1dd5a721ce1870\\\/2020\\\/09\\\/20\\\/7c31ea14-2046-4522-a267-607e581c82a1\\\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/9735c91dd1eab373240849bfaf1dd5a721ce1870\\\/2020\\\/09\\\/20\\\/7c31ea14-2046-4522-a267-607e581c82a1\\\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/","og_locale":"en_US","og_type":"article","og_title":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-01-25T03:14:31+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge","datePublished":"2022-01-25T03:14:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/"},"wordCount":871,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/","url":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/","name":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","datePublished":"2022-01-25T03:14:31+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/9735c91dd1eab373240849bfaf1dd5a721ce1870\/2020\/09\/20\/7c31ea14-2046-4522-a267-607e581c82a1\/belarus-protests.jpg?width=770&amp;height=578&amp;fit=crop&amp;auto=webp"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/belarusian-activists-launch-ransomware-attack-against-railway-in-protest-of-dictatorship-russian-troop-surge\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Belarusian activists launch ransomware attack against railway in protest of dictatorship, Russian troop surge"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=44973"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/44973\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=44973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=44973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=44973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}