Russia-Ukraine War: 3 Cyber Threat Effects, 1 Year In

Since the Russian invasion of Ukraine, cyber activity has evolved across three converging areas: state-sponsored APT operations (including espionage and wiper malware like CADDYWIPER and PAYWIPE), politicized cybercrime and ransomware (Conti fallout and LockBit’s growth), and a renewed wave of hacktivism (notably KillNet and the IT Army of Ukraine). The report highlights blurred boundaries between actor types, notable TTP overlaps, the operational impact on business continuity and information integrity, and advises organizations to monitor Russian-linked threat groups and adapt threat models and resilience plans accordingly.