Skip to content

Topic

Russia-Ukraine Cyber and Infrastructure Conflict

The continuing exchange of cyber operations and attacks on digital and energy infrastructure between Russia and Ukraine since the 2022 invasion.

Current stories

securityConfirmed4 publishers

ESET traces at least 21 months of changes to UAC-0099's MatchBoil downloader

ESET says UAC-0099 has reworked its MatchBoil downloader since at least July 2024, with the newest version appearing in April 2026. Repeated changes aimed at security software mean indicators from CERT-UA's August 2025 write-up describe an older build.

Perspective Coverage

4 publishers
Builder
Builder 30%
Operator
Operator 63%
Investor
Investor 7%

Reality

Evidence68
Adoption
Not scored
Hype gap+12
Incentives35
Confidence66
securityOne report1 publisher

Belarusian Cyber Partisans claim 2023 breach of Moscow's health network

Belarusian Cyber Partisans say they took admin access to Moscow's health department network in 2023, including systems linked to other agencies. Solar, the Rostelecom unit that found the intrusion, puts the first trace a year later, so the two sides disagree on how long the attackers were inside.

Publishers:therecord.media

Reality

Evidence45
Adoption
Not scored
Hype gap+25
Incentives70
Confidence50
securityOne report1 publisher

CikLeak hands Vybory developer chats to Important Stories days before Russia's Duma vote

The group says it took documents, server configurations, passwords and staff communications from Russia's Central Election Commission and the contractors building Vybory, and Important Stories says it authenticated the files.

Publishers:therecord.media

Reality

Evidence32
Adoption27
Hype gap+24
Incentives78
Confidence36
securityOne report1 publisher

Wildberries blames its own DDoS defenses for weeks of frozen seller payouts

The marketplace says security measures added after a DDoS attack can suspend transfers while it is under way, which is how some merchants went unpaid for weeks. The sellers' union counts 20 billion rubles outstanding and doubts the account.

Publishers:therecord.media

Reality

Evidence34
Adoption55
Hype gap+16
Incentives82
Confidence44
securityConfirmed2 publishers

Russia extends its infrastructure takeover decree to data centres it never designated critical

Operators of more than 180 Russian facilities, most of them inside Ukrainian strike range, have been told to fund counter-drone protection themselves, with temporary state administration as the penalty for those who do not.

Perspective Coverage

3 publishers
Builder
Builder 22%
Operator
Operator 48%
Investor
Investor 30%

Reality

Evidence55
Adoption30
Hype gap+20
Incentives60
Confidence55