Cyber Army of Russia

The Cyber Army of Russia is a significant threat actor in the global cybersecurity landscape. Known for its suspected ties to Sandworm, a Russian state-sponsored cyber espionage group, it has been involved in a series of malicious activities since 2022. The group has launched numerous low-impact Distributed Denial of Service (DDoS) attacks against entities in Ukraine and other countries that have shown support for Ukraine. In April 2024, the group escalated its actions by launching an attack on a wastewater treatment plant in the United States. Furthermore, it has shown a pattern of collaboration with other pro-Russia groups such as NoName057, which was notably active in the first half of 2024. In a significant development, Ukraine's Security Service (SBU) arrested a member of this group, marking a crucial step in combating its activities. The arrest was announced via the SBU's Telegram channel, which had previously been a target of DDoS attacks claimed by the Cyber Army of Russia. This arrest underscores the ongoing efforts by Ukrainian authorities to counteract the cyber threats posed by pro-Russian hacker groups. In response to these escalating threats, the US Government took action by sanctioning key members of the Cyber Army of Russia Reborn, an offshoot of the original group. Specifically, Russian hacktivists Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko were sanctioned for their roles in cyber operations against U.S. critical infrastructure. These measures highlight the growing international concern over the activities of Russian-linked cyber groups and represent a concerted effort to disrupt their operations.