One year after: The cyber implications of the Russo-Ukrainian war

**Executive summary:** Sekoia.io examines cyber operations during the first year of the Russo‑Ukrainian conflict, highlighting Russia‑linked destructive malware campaigns (multiple wipers such as AcidRain, CaddyWiper and others), strategic espionage by GRU/FSB/SVR-associated APTs, and the surge of hacktivist and opportunistic cybercrime activity (DDoS, ransomware, hack-and-leak) that affected Ukrainian, allied and commercial infrastructure; the report includes a technical analysis of the KA‑SAT/AcidRain compromise, notes a tactical shift away from worm-like destructive malware to simpler wipers and pseudo-ransomware, and assesses ongoing strategic risks to supply chains and critical services.