Five Eyes cybersecurity agencies have issued a joint security advisory warning of an increased risk of Russian cyberattacks against critical infrastructure. The authorities said they have intelligence indicating that the Russian government is exploring options for potential cyberattacks against Western nations.
“Additionally, some cybercrime groups have recently publicly pledged support for the Russian government. These Russian-aligned cybercrime groups have threatened to conduct cyber operations in retaliation for perceived cyber offensives against the Russian government or the Russian people,” the agencies said. “Some groups have also threatened to conduct cyber operations against countries and organizations providing materiel support to Ukraine. Other cybercrime groups have recently conducted disruptive attacks against Ukrainian websites, likely in support of the Russian military offensive.”
The advisory describes tactics, techniques, and procedures (TTPs) that Russian state-backed hacker groups (APT28, APT29, the Sandworm Team and other APTs) use in their cyber operations. It also provides measures critical infrastructure organizations should implement to strengthen their cybersecurity and protect information technology (IT) and operational technology (OT) networks against Russian APT groups and criminal cyber threats, including destructive malware, ransomware, distributed denial-of-service attacks, and cyber espionage.
Cybersecurity Help statement on the critical situation in Ukraine
On February 24, people in many cities and towns across Ukraine woke up to the sounds of explosions and artillery fire, as the Russian Federation launched a full-scale invasion of the country. Such actions are unacceptable, political ambitions of any man aren’t worth of blood, tears, and destruction of millions of lives. We give our full support to the Ukrainian people in these hard times. No more war! Слава Україні!