$2.5 Billion in Damage, Zero Ransom Demand: Russia's New Playbook

An analysis of the Jaguar Land Rover ransomware incident concludes the attack was highly sophisticated, likely state‑linked (probable Russian involvement), and destructive rather than financially motivated — it caused five weeks of halted production, large economic losses, and used novel encryption. The report emphasizes the blurred line between cybercrime and state activity, warns that attribution uncertainty is part of the adversary’s toolkit, and recommends prioritizing containment, resilience, and defense-in-depth to withstand similar future attacks.