Russian hackers plotting another cyber attack against Ukraine – Microsoft

That’s according to Microsoft’s research report seen by Reuters, Ukrinform wrote.

The report by the company's cyber security research and analysis team outlines a series of new discoveries and outlooks about Russian cyber erations throughout the war.

 “Since January 2023, Microsoft has observed Russian cyber threat activity adjusting to boost destructive and intelligence gathering capacity on Ukraine and its partners’ civilian and military assets,” reads the report.

Read also: Energy, defense sectors most subjected to cyberattacks in Ukraine

According to experts, one group “appears to be preparing for a renewed destructive campaign.”

Experts say the tactic of combining physical military erations with cyber techniques mirrors prior Russian activity.

Microsoft found that the so-called “Sandworm,” a particularly shisticated Russian hacking team, was testing “additional ransomware-style capabilities that could be used in destructive attacks on organizations outside Ukraine that serve key functions in Ukraine’s supply lines.”

A ransomware attack typically invves hackers penetrating an organization, encrypting their data and extorting them for payment to regain access. Historically, ransomware has also been used as cover for more malicious cyber activity, including so-called wipers that simply destroy data.

Since January 2022, Microsoft said it had discovered at least nine different wipers and two types of ransomware variants used against more than 100 Ukrainian organizations.

Also, more stealthy Russian cyber erations are intensifying, designed to directly compromise organizations in countries allied to Ukraine.

"In nations throughout the Americas and Eure, especially Ukraine’s neighbors, Russian threat actors have sought access to government and commercial organizations invved in efforts to support Ukraine," said Clint Watts, general manager for Microsoft's Digital Threat Analysis Center.

Read also: Russia carrying out more than 10 cyberattacks on Ukraine daily – SBU

As reported, law enforcers in Germany and Ukraine, with the support of Eur, the FBI, and the Netherlands authorities, conducted a series of raids in the case of an international hacker group that had been active for several years. Russian nationals are among the suspects.