Summary
This technical report examines the cyber threat landscape associated with the Russia-Ukraine war from January 2022 to January 2026. It outlines the attack typologies, volumes, and trends observed during this period, highlighting the asymmetric nature of cyber operations targeting both Ukraine and Russia. The report details that Ukraine experienced a significantly higher volume of cyber incidents, predominantly DDoS attacks, while operations against Russia were characterized by data breaches and defacements. The document also discusses the major actors involved in these cyber activities, including pro-Russian groups and their targeting strategies. Furthermore, it presents an analysis of the most affected sectors in both countries, noting that critical infrastructure in Ukraine is particularly vulnerable, while operations against Russia tend to focus on civilian sectors. The report concludes with defensive implications and recommendations for mitigating the observed cyber threats, emphasizing the evolving nature of cyber warfare in the context of ongoing geopolitical tensions.
