A Cyber Threat Analysis Of The Russia-Ukraine Conflict

The Ankura Cyber Threat Investigations & Expert Services (CTIX) team conducted a technical analysis of historical and ongoing adversarial activity associated with the current Ukrainian/Russian conflict. In doing so, the CTIX team leveraged proprietary sources of threat intelligence which were then enhanced with additional data points collected from various open and closed sources. This report showcases identifiable cybersecurity risks at the center of the Ukraine-Russia conflict and corresponding actionable threat intelligence.

Several of the most pertinent findings include:

• It is evident that Russia has been employing cyberattacks as a key strategy in the invasion of Ukraine, including destructive malware, Distributed Denial-of-Service (DDoS) attacks, and misinformation tactics