In a relentless assault on one of Ukraine’s key financial institutions, hackers launched a massive distributed denial-of-service (DDoS) attack against Monobank, a popular online bank in Ukraine. The attack primarily targeted a service that facilitates military donations, a critical tool for Ukrainians supporting their armed forces.
Oleh Horokhovskyi, Monobank’s CEO, revealed that the attack began on Friday evening and persisted until Monday morning, with an overwhelming volume of 7.5 billion requests per second. Horokhovskyi characterized the scale of the attack as “untypical,” underscoring its severity.
Despite the intensity of the attack, Monobank’s operations remained unaffected. The bank collaborated closely with Ukraine’s security services and experts from Amazon Web Services, a U.S.-based cloud computing giant, to counteract the flood of malicious traffic.
Monobank, which operates solely through a mobile app, has become a prime target for cyberattacks. In a previous incident in January, the bank endured 580 million junk service requests over three days, demonstrating the persistent threat it faces.
The most recent attack was intended to disrupt a service that allows Ukrainians to easily raise donations for their military. This platform enables users to create a virtual wallet and share it directly to their Instagram stories, making contributions quick and accessible.
Horokhovskyi noted that since Ukraine’s recent cross-border operation into Russia’s Kursk region, the pace of donations through Monobank has tripled. He speculated that the continuous flow of donations over the past three years may have provoked enemies to target the service “at any cost.”
While Monobank hinted at Russia’s involvement in the attack, no concrete evidence was provided. Horokhovskyi previously described the bank as “one of the most attacked” IT entities in Ukraine.
The cyber onslaught wasn’t limited to Monobank. EasyWay, a Ukrainian service offering public transport information, also reported being targeted by a DDoS attack, which threatened to disrupt its operations. EasyWay did not identify the attackers.
On the other side of the conflict, Russian services have also been subjected to DDoS attacks, often originating from Ukraine. Earlier this month, hackers targeted government and business websites, as well as critical infrastructure in Russia’s Kursk region following Ukraine’s incursion. In July, several major Russian banks confirmed they were hit by DDoS attacks, which were allegedly “planned from abroad,” temporarily disrupting their mobile apps and websites.
