Russia is one of the worlds most prolific cyber actors. This case study outlines “what we have learnt from Russia’s cyber operations in Ukraine so far, and how might the value of cyber operations or use of capabilities differ depending on context to achieve their strategic objectives?” Cyber espionage is an important tactical weapon, that supports Russian political and economic objectives in Ukraine and all around the world. It outlines how Russian state and state-aligned actors have integrated cyber tactics into broader military strategies-illustrated by early attacks against Ukraine’s critical infrastructure-and have since shifted toward more opportunistic yet chronic intrusions. The study highlights the use of cyber espionage, disinformation campaigns, and the involvement of both patriotic hackers and organized crime gangs. It further emphasizes the growing risks to democratic institutions and the need for enhanced cyber resilience, robust defensive measures, and improved cyber hygiene to mitigate these multifaceted threats.
