
“What Mr. Musk has said is wholly unconvincing based on the evidence so far. It’s pretty much garbage,” Ciaran Martin, a former chief executive of the United Kingdom’s cybersecurity agency, who now teaches at Oxford University, told the BBC on Tuesday morning.
The cyberattack on X impacted users since at least Monday morning and destabilized many features on the website, such as viewing posts and user profiles. Musk’s statements and cybersecurity experts’ observations suggest it was a so-called distributed-denial-of-service attack (DDoS), which involves pointing an overwhelming amount of traffic at a website to bring it down.
In a DDoS attack, the origin of IP addresses is largely irrelevant: The attacks come from networks of electronic devices spread across the world, called “botnets,” that direct the traffic to a targeted website.
Martin said that could mean some of those devices were from Ukraine, but “some of them will be from Russia, some will be from Britain, from the U.S., South America, everywhere. It tells you absolutely nothing.”
Dmitry Budorin, founder of Ukrainian cybersecurity firm Hacken, said on X that DDoS attacks “botnets use hijacked devices worldwide, and the IP addresses seen in the attack traffic are just those of the infected machines, not the masterminds.”
Reuters reported an industry source saying the amount of traffic coming from Ukraine appeared “insignificant.”