After Russian troops invaded Ukraine on February 24 last year, the country’s military responded with a range of defensive measures, but it also took steps to open a second front in the war—a digital one. As I reported for CJR at the time, the Ukrainian government posted appeals in online hacker forums, asking for volunteers to protect Ukrainian infrastructure and conduct digital missions against Russia. The posts asked hackers to “get involved in the cyber defense of our country,” and according to Foreign Policy, within a couple of months more than 400,000 had joined the informal hacker army.
Cybersecurity experts say Ukraine had one thing going for it when Russia attacked a year ago, at least in terms of computer warfare: it was already well aware of the risk of Russian hacking. In 2015, a digital attack crippled Ukraine’s power plants and left hundreds of thousands without electricity, and many believe hackers affiliated with the Russian government caused the outage. In 2017, a ransomware attack known as NotPetya, which most experts believe was created by Russian entities, caused an estimated $10 billion in damages globally, and much of that damage occurred in Ukraine. One year later, there have been thousands of digital skirmishes between Russia and Ukraine, but it’s unclear who (if anyone) is actually winning, or what impact all this cyber-rattling has had on the larger war.
According to a recent presentation by Gen. Yurii Shchyhol, head of Ukraine’s State Service of Special Communications and Information Protection, the country’s Computer Emergency Response Team responded to 2,194 “cyber incidents” last year, one quarter of which targeted the federal government and local authorities, Computer Weekly magazine reported. The rest involved defence and other security sectors, as well as energy, financial services, IT and telecom, and logistics. On the other side of the ledger, Russians in close to a dozen cities were greeted one day last week by radio alerts, text warnings, and sirens letting them know about an air raid or missile strikes that never came. Russian officials said the alerts were the work of hackers.
Continue reading “Hackers on the front lines of the Ukraine war”