MOSCOW — A new strain of malicious software has paralyzed computers at a Ukrainian airport, the Ukrainian capital’s subway and at some independent Russian media.

The Odessa international airport in southern Ukraine, the Kiev subway and prominent Russian media outlets such as Interfax and Fontanka reported being targeted Tuesday.

The cyberattack appears to be similar to a major attack in June that locked the computers of hospitals, government offices and major multinationals with encryption that demanded a ransom for their release. The software appeared to have originated in Ukraine.

The Moscow-based cybersecurity firm Group-IB said Wednesday the ransomware called BadRabbit also tried to penetrate the computers of major Russian banks but failed. None of the banks has reported any attacks.

The Moscow-based cybersecurity company Kaspersky Lab said it was aware of more than 200 companies in Russia, Ukraine, Turkey and Germany that were targeted by the ransomware.

The Odessa airport said its information systems have been affected, although it continues to service flights. The subway in the Ukrainian capital of Kiev said it cannot process online payments or bank card payments.

The operations of Russia’s only privately owned news agency, Interfax, have been paralyzed since Tuesday.

The Russian Central Bank said Wednesday it had recorded BadRabbit’s attack on its systems but they were not compromised.


This story corrects the name of the cybersecurity firm to Group-IB.

Author photo
The AP is one of the largest and most trusted sources of independent newsgathering. AP is neither privately owned nor government-funded; instead, as a not-for-profit news cooperative owned by its American newspaper and broadcast members, it can maintain its single-minded focus on newsgathering and its commitment to the highest standards of objective, accurate journalism.