2021 and 2022 have made a name for themselves in cyber-security – not only was the shift to remote working during the pandemic a major factor in increasing security risk and disruption to businesses, but there is also now the threat of the world’s most potent and active cyber adversary Russia, lurking in the shadows.
The current conflict has seen Russia turn to purely destructive attack methods. Distributed-denial-of-service attacks (DDoS), where targeted websites are overwhelmed with fake traffic, and malware wipers, where data is erased in an irretrievable manner, are currently the favoured methods of choice.
It seems low level Russian affiliates have stepped up to perform these destructive methods, while skilled affiliates have been set aside, to focus on more strategic and targeted attacks, such as uncovering government agency plans and targeting critical infrastructure.
It’s clear that Russia is utilising a high number of people, regardless of skillset, to maximise power.
Ransomware is still making a mark.
In these destructive attacks, ransomware has been utilised as a decoy. Notorious Russian strains, such as Conti, have pledged their allegiance to Russia, despite the 1TB leakage of their internal chat logs and the potential release of a decryption key.
Undoubtedly, the most concerning change remains around the destructive attack methods and their susceptibility to spill over the borders, whether this is purposeful (due to the sanctions imposed on Russia by the UK, EU and US) or accidental. Organisations, no matter where they are located, could be at serious risk.
Stay up to date with our Threat Intelligence news and insight by subscribing to our podcast.
Safety starts with vigilance, and employers must be prepared to question and evaluate what security practices are and are not working for them, whether that involves prioritising cyber security work in the short term or offering temporary defence boosts.
Key actions to take:
“The Geo-Political position in the world is creating stress and concern for organisations and individuals alike, and it’s difficult not to let that cloud our focus. However, we must not only stay vigilant of the cyber-risks posed by Nation state threat actors like Russia, but also of the everyday struggles that weaken the strength of staff in companies. Recruiting and keeping good security staff is a huge problem that is increasing the opportunities for success by cyber criminals. This blog is a step forward in helping businesses like yours take action and ensure resiliency during these unpredictable times.”
– Mike Brown, CEO at Talion
For more insight into how you, as a company, can make important investments to your security posture, read our article on DDoS Attacks & Malware: Remediation Guidance Is Critical.
Call us directly and we’ll put you in touch with the most relevant cyber expert.
Not currently free to call? Give us a brief description of what you’re looking for by filling out our form and we’ll email you as soon as we can.
Thought-provoking cyber security discussion at Michelin-star restaurants across the UK.
