A year after Russia launched its full-scale invasion of Ukraine, the country is still struggling to gain control as evidenced by a massive surge in cyber attacks against the country. Google’s Threat Analysis Group (TAG) and Mandiant published a report revealing that cyber attacks against Ukraine increased by 250% in 2022 when compared to two years ago. These attacks were focused heavily on the Ukrainian government, military entities, critical infrastructure, utilities, public services, and media sectors. The attackers used a variety of techniques such as phishing, wiper strains, and ransomware. In addition to Russia, Chinese government-backed actors have also shifted their focus towards Ukrainian and Western European targets for intelligence gathering.
Russia is attempting to gain control of Ukraine by undermining the Ukrainian government and fracturing international support for Ukraine. The Kremlin is engaging in covert and overt information operations designed to shape public perception and maintain domestic support for Russia. The conflict has also caused the splintering of some hacking groups over political allegiances and in some cases, even caused them to close shop.
This joint report highlights the fact that cyber operations can be used to supplement traditional forms of warfare and is a notable shift in the Eastern European cybercriminal ecosystem. As Russia continues to struggle to gain control of Ukraine, it is clear that cyber operations will play an integral role in future armed conflicts.
Key Points:
• Cyber attacks against Ukraine increased by 250% in 2022 when compared to two years ago.
• These attacks were focused heavily on the Ukrainian government, military entities, critical infrastructure, utilities, public services, and media sectors.
• In addition to Russia, Chinese government-backed actors have also shifted their focus towards Ukrainian and Western European targets for intelligence gathering.
• Cyber operations can be used to supplement traditional forms of warfare, and is a notable shift in the Eastern European cybercriminal ecosystem.