Cyber Army of Russia

The Cyber Army of Russia, a threat actor group known for its malicious cyber activities, has been identified as the most active entity claiming Distributed Denial of Service (DDoS) attacks against Ukraine. This information was revealed in recent research conducted by ASERT, which also highlighted that these attacks span various industries and involve multiple hacktivist groups, including CyberDragon and the Cyber Army of Russia among others. Besides Ukraine, the Cyber Army of Russia has only sporadically targeted other countries, indicating a focused cyber aggression towards Ukraine. Microsoft has identified three hacktivist groups — Solntsepek, InfoCentr, and Cyber Army of Russia — that regularly interact with Seashell Blizzard, a Russian state-sponsored threat actor affiliated with the GRU, Russia's main military foreign-intelligence service. Furthermore, Mandiant researchers have linked XakNet and the Cyber Army of Russia to Russian security services, suggesting that these groups act as fronts to share information obtained illegally by state-backed groups. Other pro-Russia hacktivist groups such as Turla, XakNet, KillNet, NoName057(16), Anonymous Russia, and Cyber Army of Russia remain active, according to the SSCIP. In a significant development, Ukraine's security service (SBU) has detained an alleged member of the Cyber Army of Russia. The news was first reported by The Record Media and later confirmed by the SBU on their official Telegram channel. This arrest represents a critical step in combating the cyber threats posed by this group and could potentially lead to more insights into their operations, tactics, techniques, and procedures.