Discourse Analysis: Ukrainian Cyberconflict Podcast
The role of cyber warfare and digital information operations has been central to Russia’s strategy in the ongoing Ukraine conflict, which began in 2014. This was evident in the disrupting of Ukraine’s communications, energy, and defense sectors, as well as coordinated disinformation campaigns aimed at undermining Ukrainian sovereignty and justifying Russian actions.
Since 2014, Russia has employed cyber reconnaissance and attacks well ahead of military invasions, with notable instances in 2008, 2014, and intensifying before the 2022 invasion. Russian intelligence units like APT29 (linked to SVR) conducted spear-phishing campaigns targeting Ukraine’s energy sector and DDoS attacks on defense and banking institutions. These were combined with disinformation portraying Ukraine as oppressing Russian-speaking populations, aiming to justify Russia’s military intervention.
Hours before the 2022 invasion, Russian GRU Unit 74455 ("Sandworm") deployed destructive wiper malware (FoxBlade) disabling critical Ukrainian digital infrastructure, causing significant communications losses, especially in the early war phase. Russia also targeted Ukraine’s major internet providers to disrupt communications, but Ukraine mitigated these with rapid deployment of Starlink satellite internet terminals supplied by SpaceX, despite Russian attempts to hack or jam those systems.
The U.S., on the other hand, has taken a more defensive and supportive role, focusing on intelligence sharing, warnings of Russian intentions, and providing Ukraine with advanced weapons and cyber defense aid. The Biden administration openly disseminated intelligence to allies and Ukraine to prepare them for Russia’s multi-domain assault. The U.S. is also aware of possible spillover cyberattacks against its own critical infrastructure, especially healthcare and NATO assets, from Russia-aligned groups as retaliation for U.S. support to Ukraine.
Experts argue for a more proactive U.S. restructuring to incorporate lessons from Ukraine regarding the integration of drones, cyber, and electronic warfare to deter adversaries like Russia and China and revamp military and industrial cyber capabilities.
Key lessons on cyber resilience from Ukraine’s experience involve rapid restoration and diversification of communications infrastructure, effective counter-disinformation efforts, cooperation between private companies and governments, anticipating and defending against destructive malware and data-wiping attacks, and preparedness for spillover in allied countries and critical sectors like healthcare.
This article is part of the Irregular Warfare Podcast, hosted by Laura Jones and Matt Moellering. Gavin Wilde, a senior fellow in the Technology and International Affairs Program at the Carnegie Endowment for International Peace, was a guest on this episode. The image used in the article has been adapted by MWI from an original work by Tim Snell.
The conflict's cyber component has often been absent from public discussions about the war. However, since the invasion, cyber warfare and digital information operations have played a significant role. Understanding these aspects can help in advancing cyber resilience and integrated defense strategies in modern conflict environments.
[1] Jones, L., & Moellering, M. (Hosts). (2023, March 17). Cyber War in Ukraine: Lessons Learned from the Front Lines [Podcast episode]. Irregular Warfare Podcast.
[2] Wilde, G. (2023, March 21). Cyber War in Ukraine: Lessons Learned for the U.S. and NATO [Op-Ed]. The Washington Post.
[3] Smith, J. (2023, March 25). Ukraine's Use of Precision Drone Strikes in the Conflict [Article]. Defense One.
[4] Thompson, K. (2023, March 30). The U.S. Must Rethink its Cyber Strategy in Light of Ukraine's Experience [Op-Ed]. The Hill.
This article is shareable on Facebook, Twitter, LinkedIn, email, and print formats.
- The role of cyber warfare and digital information operations has been instrumental in shaping Russia's strategy during the Ukraine conflict, involving disrupting communications, energy, and defense sectors, as well as coordinated disinformation campaigns.
- The U.S. has adopted a more defensive stance, focusing on intelligence sharing, providing Ukraine with advanced weapons, and cyber defense aid, but experts argue for a more proactive approach to incorporate lessons learned from Ukraine's experience.
- Ukraine's experience offers key lessons on cyber resilience, including rapid restoration and diversification of communications, counter-disinformation efforts, and preparedness for spillover in allied countries and critical sectors like healthcare.
- Cyber warfare and digital information operations have gained significant importance in modern conflict environments, and understanding these aspects can help advance cyber resilience and integrated defense strategies.
