What led to the X outage that Musk attributes to Ukraine?

      The social media platform X experienced a series of outages yesterday, which its owner, Elon Musk, has described as a “massive cyberattack” originating from Ukraine. Analysts suspect that the disruption was due to botnets, but identifying those responsible may be challenging.

      The outages reportedly began around 14:00 CET and persisted through most of the afternoon, tapering off by approximately 18:00, as indicated by Down Detector. While the interruptions seemed to have stabilized overnight, there was an increase in downtime reports starting at 08:00 AM today up to the time of this writing.

      Musk stated during an interview with Fox Business, “We’re not sure exactly what happened. But there was a massive cyberattack aimed at taking down the X system, with IP addresses tracing back to the Ukraine area.”

      In a separate message on X, Musk mentioned, “We experience attacks daily, but this one was executed with significant resources. It suggests involvement from either a large, coordinated group or a country.” However, Musk has not provided any supporting evidence for his assertions.

      According to Toby Lewis, the head of threat analysis at the UK-based cybersecurity firm Darktrace, the X outage seems to be a “fairly standard DDoS attack,” where numerous devices inundate a server or network with traffic in an effort to overwhelm and shut it down.

      Lewis explained, “These types of attacks are almost always perpetrated by botnets—globally distributed networks of computers that have been unknowingly recruited for the attack, typically through some form of compromise or malware.”

      With botnets, hackers can control devices in a different country without physically being present. Therefore, even if the IP addresses did indeed originate from Ukraine, as Musk claimed, it does not definitively link the attack to the country or its government.

      Jake Moore, a global cybersecurity advisor at the Slovakian firm ESET, emphasized the anonymity this method provides for the attackers. “DDoS attacks are an ingenious way of targeting a website without breaking into the main framework, allowing the perpetrators to remain largely unidentified and difficult to hold accountable,” he remarked.

      X’s issues add to Musk's growing challenges. Musk purchased Twitter in October 2022 for $44 billion. Within a year, he rebranded the platform to X, dismissed about 80% of the workforce, and implemented significant changes to content moderation policies.

      Since Musk's acquisition, the platform has faced multiple technical issues. The last significant outage occurred in August of the previous year, preventing hundreds of thousands of users from accessing his interview with then-former US President Donald Trump. Musk later attributed that event to a “massive” DDoS attack.

      Determining whether the recent attack was driven by political or ideological motives may be nearly impossible. However, it comes amid considerable backlash against Musk, whose connections to the US government and open support for far-right politicians have sparked controversy and discontent.

      On Monday, Tesla's stock reached a five-year low amid protests and arson incidents targeting the electric vehicle brand, which many associate with Musk, the CEO and founder. A recent report indicated that Tesla sales in Germany plummeted 70% in February, following a 60% decline in January.

      Analysts have connected Tesla's struggles to Musk's increasingly provocative behavior. In Europe, Musk has publicly supported Germany's far-right AfD, even conducting an interview on X in which he praised the party's leader Alice Weidel. At Trump's inauguration on January 20, Musk made a controversial hand gesture that many likened to a Nazi salute.

      “There’s no doubt that ‘the Musk factor’ has had an impact on Tesla’s sales, much like his reputation influenced Twitter when he acquired it and rebranded it as X,” stated Andrew Fellows, an automotive industry expert at Star, a tech consultancy firm.

      Musk’s behavior has also raised concerns for Starlink, a subsidiary of his company SpaceX. European officials are contemplating replacing the satellite internet service with a local alternative due to rising worries about relying on a single, privately-owned network whose proprietor has direct ties to the US government.