Why Cyberattacks Play a Minor Role in the Russia-Ukraine Conflict
Despite high expectations, the Russia-Ukraine war features surprisingly few major cyber operations as kinetic strikes prove more effective. Ukraine responds by mobilizing a global cyber army to target Russian infrastructure.
Before Russia invades Ukraine, outside observers expect cyberattacks to play a major role in the conflict. Despite Russia's strong cyber capabilities, there is relatively little visible action against Ukrainian systems via cyberattacks. Several factors explain this absence, including the higher efficacy of physical kinetic attacks and the difficulty of planning massive cyber operations on a short timeline.
Russia does execute some notable cyber operations, such as a series of distributed denial of service (DDoS) attacks against Ukrainian banking and defense websites in early February. The Russian military intelligence agency, known as the GRU, reportedly launches these initial strikes. Additionally, Russian groups deploy WhisperGate, a destructive wiper malware disguised as ransomware, on Ukrainian systems in January 2022.
Ukraine pursues a unique strategy in cyberspace by attempting to mobilize international sentiment and recruit an army of cybersecurity professionals. This volunteer force actively targets Russian military and critical infrastructure. A complete understanding of the cyber aspect of this invasion remains impossible until the conflict ends, but analysts continue to track the observed actors and major operations on both sides.