X cyber attack—Musk blames Kyiv, but who is behind Dark Storm?

UNITED STATES - DECEMBER 5: Elon Musk is seen in the U.S. Capitol after a meeting with Sen. John Thune, R-S.D., while on the Hill to talk about President-elect Donald Trump's "Department of Government Efficiency," on Thursday, December 5, 2024. (Tom Williams/CQ-Roll Call, Inc via Getty Images)

Musk Blames Ukraine for X Cyber Attack—But Experts Aren’t Convinced.

Who Was Behind the X Cyber Attack?

Elon Musk claimed that his social media platform X suffered a “massive cyber attack” on Monday, with IP addresses traced to “the Ukraine area.” However, hacking group Dark Storm Team took responsibility in now-deleted Telegram posts—before later denying any ties to Ukraine in the X cyber attack.

Cybersecurity experts, along with Ukrainian officials, were quick to dismiss Musk’s claims. Former UK National Cyber Security Centre chief Ciaran Martin called them “pretty much garbage.” Experts pointed out that other attackers—like Russia—could have exploited Ukrainian IPs to make it appear as though Kyiv was responsible.

Who is Dark Storm Team?

The hacktivist group emerged in 2023 and has carried out cyber attacks against governments, NATO, and pro-Israel organizations.

According to cybersecurity firm Check Point, Dark Storm Team focuses on high-profile disruptions and has targeted:

Israeli hospitals
US airports
Government websites
Critical infrastructure

Unlike ransomware gangs, the group doesn’t demand money but operates with political motives, declaring:
“We will attack any country […] that supports the occupying entity.”

However, Dark Storm Team also offers its hacking services for hire, raising further doubts about its real motives.

Ukraine Denies Involvement in X Cyber Attack

Musk pointed to Ukrainian IP addresses, but Dark Storm Team rejected any link to Kyiv, saying:
“It is an accusation without any evidence, and we have no relationship with Ukraine.”

Cybersecurity expert Muhammad Yahya Patel from Check Point also questioned Musk’s claim, explaining:
“DDoS attacks usually come from multiple locations, not just one place.”

Musk’s Feud With Ukraine Intensifies

Musk’s Starlink controversy also heated up after he suggested that Ukraine’s front line would collapse if he cut off the service. The billionaire later insisted he would “never turn off” the satellite system, despite rising tensions between Kyiv and Washington over negotiations for critical minerals.

What’s Next for X?

With Dark Storm Team both claiming and then denying responsibility, and experts casting doubt on Musk’s accusations, the real culprit remains unknown. Was Ukraine really involved—or was this attack orchestrated to frame Kyiv?

Herbert Bauernebel

Herbert Bauernebel has been reporting from New York since 1999 and currently works for Bild.de, OE24 TV, and US Live. He also runs the news portal AmerikaReport.de. Bauernebel has covered nearly all major US events of the past quarter-century, including 9/11, Hurricane Katrina, Barack Obama’s election, Donald Trump’s surprise victory, the pandemic, last year’s election showdown, as well as natural disasters such as hurricanes and oil spills. He has also reported firsthand on international events, including the Asian tsunami, the Haiti earthquake, and the Fukushima disaster. He lives in Brooklyn with his family and holds degrees in communication and political science from the University of Vienna. Bauernebel is the author of a book about his experiences on 9/11, And the Air Was Full of Ash: 9/11 – The Day That Changed My Life.