In the first half of 2024, there was a shift in the focus of Russian hackers' cyberattacks to everything directly related to the theater of operations and attacks on service providers. This is stated in the analytical report "Russian Cyber Operations" H1'2024, prepared by The State Service of Special Communications and Information Protection of Ukraine.
"In particular, in 2022, the enemy focused on operations to destroy the IT infrastructures of critical infrastructure organizations, as well as obtaining databases and lists. They also actively conducted campaigns against media and commercial organizations. Hostile hackers went to where there were obvious shortcomings, vulnerabilities and opportunities that they could easily exploit," the service said in a statement.
Last year, their strategy gradually shifted to consolidating and covertly obtaining information and using the cyber component to obtain feedback on the results of their kinetic attacks. According to the State Service for Special Communications, IT proved to be an industry that quickly recovered from hacks and became stronger.
"In 2024, there is a shift in the focus of attacks to everything directly related to the theater of operations and attacks on service providers in order to remain invisible for as long as possible, to maintain a presence in systems related to war and government activities," the service noted.