Analysis finds decline in hacktivism around Ukraine war

Data compiled by Netskope’s Paolo Passeri indicates the wave of Russia-related incidents has broken, after surge of activity around the war in Ukraine.

New data compiled by Paolo Passeri, Cyber Intelligence Principle, Netskope EMEA shows the wave of cyber attacks surrounding the Russian invasion of Ukraine has tailed off. 

According to public data, there were 83 cyber events related to Russia between February 2022 and May 2022, accounting for almost 10% of all global cyber events in the period. However, this surge in activity was short-lived. There were just six incidents related to Russia in June and July, accounting for 1% of all cyber events globally. This dramatic fall in activity in the region suggests that cyber threat actors’ and hackivists’ efforts around the war in Ukraine have not been sustained throughout the conflict.

Cyber warfare has been in steady decline globally since the beginning of the year, with 56% of all reported cyber warfare-related incidents taking place in February and March. The same pattern has been seen in hacktivism activities, which slowed across the board in June and July despite having actively targeted real estate and mining businesses owned by Russian oligarchs earlier in the year. However, Ukraine and its allied countries remain the constant target of cyber espionage operations carried out primarily by threat actors from Russia and Belarus. 

Looking at the state of cyber events more broadly, Passeri’s analysis shows that financially motivated cybercrime remains the dominant form of cyber attack making up 72% of all incidents so far this year. Other findings include: 

  • Healthcare continues to be the most targeted sector for cyber criminals, accounting for 14% of all cyber events so far this year. Of those attacks, just 0.5% could be attributed to cyber warfare with 99.5% of events being recorded as financially motivated cybercrime.
  • Public administration, including the defense industry, was also heavily targeted, accounting for 12% of all cyber events. 35% of these attacks were financially motivated cybercrime, with 26.7% hacktivism, 26.5% cyber espionage, and 10.5% cyber warfare.
  • Financial services, which comprises finance, insurance, and fintech, was targeted in 8% of all cyber events, with economic gain being the prevailing motivation for over 99% of attacks.

Paolo Passeri says: “The invasion of Ukraine sparked a flurry of cyber incidents relating to Russia in the early part of this year with a clear spike in cyber espionage, hacktivism, and cyber warfare targeting Russian businesses and individuals. The data shows however that this was short-lived with activity falling off considerably in recent months, most likely because hacktivist groups were not willing or able to sustain their efforts as the conflict continued.

“In contrast, cybercrime incidents have continued to grow throughout the year. Despite the media attention received by cyber warfare and hacktivism campaigns, cybercriminals remain by far the biggest threat to businesses, particularly in healthcare, public services and financial services, which are consistently the sectors most frequently targeted.”


Featured Articles

Tech & AI LIVE: Key Events that are Vital for Cybersecurity

Connecting the world’s technology and AI leaders, Tech & AI LIVE returns in 2024, find out more on what’s to come in 2024

MWC Barcelona 2024: The Future is Connectivity

Discover the latest in global technology and connectivity at MWC Barcelona 2024, where industry giants converge to discuss 5G, AI and more industry trends

AI-Based Phishing Scams Are On The Rise This Valentine’s Day

Research from Egress Threat Intelligence, Avast, Cequence Security & KnowBe4 outlines how AI is being used in dating app phishing scams on Valentine’s Day

Speaker Lineup Announced for Tech Show London 2024

Technology & AI

Darktrace predicts AI deepfakes and cloud vulnerabilities

Cloud Security

Secure 2024: AI’s impact on cybersecurity with Integrity360

Technology & AI