In the second half of 2024, the number of cyberattacks targeting the security and defense sector of Ukraine increased by 82% compared to the previous half year. This is reported by UNN with reference to the State Service for Special Communications and Information Protection of Ukraine.
Details
Experts warned that new clusters of threats have appeared in the electronic space. And those that existed before continue to develop and change their tactics, techniques and procedures.
The activity of the following groups was recorded:
- UAC-0020 (Vermin), which is controlled by employees of the power structures of the temporarily occupied Luhansk;
- UAC-0180;
- UAC-0125 (with a sufficient level of confidence associated with the UAC-0002 (APT44 aka Sandworm) cluster;
- UAC-0185 (UNC4221).
We face new challenges every day: on the one hand, familiar threats from Russian hacker groups associated with the gu gsh зс рф (gru) and the fsb, on the other hand, new players who act even more aggressively and more automated. The number of critical incidents has decreased somewhat, but the complexity of attacks and the resources needed to repel them have increased significantly. The threat of enemy attacks against Ukraine's energy infrastructure and critical infrastructure facilities, which often precede missile strikes, remains relevant
Let us remind you
The CERT-UA stated that Russian hackers have changed their tactics, preparing cyberattacks on the energy sector of Ukraine for 6-8 months. They use attacks on supply chains and knowledge of the internal architecture of energy systems.