Ukraine-Russia Cyber Battles Tip Over Into the Real World

As the kinetic conflict continues, Russian-aligned cyber actors (notably Gamaredon, Sandworm, and UAC-0184) are conducting sustained espionage and disruption campaigns against Ukrainian government, military personnel and critical infrastructure. Attackers use social engineering in messaging apps, spear-phishing, custom malware (including DCRat distributed via HTML smuggling), and shifting tooling (PowerShell/VBScript) to exfiltrate intelligence, compromise communications, and potentially disrupt services, forcing Ukraine and allies to divert cybersecurity resources.