A Cyber Threat Analysis of the Russia-Ukraine Conflict: What to Expect Moving Forward (3 of 4)

CTIX analysts predict a rapid and sustained increase in cyberattacks domestically and internationally. With the impending sanctions the United States and NATO allies are imposing on Russian entities, the rapid escalation of ransomware attacks throughout varying industries is likely to return with aggression and a heightened level of sophistication. Victims of upcoming ransomware attacks may face yet another challenge due to the potential of threat actors “double-dipping” their targets. This refers to when threat actors receive ransom payment from a victim, decrypt a portion of the compromised assets, then demand another payment to continue. In addition to ransomware increases across all industries, the critical infrastructure organizations particularly need to be prepared for cyberattacks and ensure that their technological infrastructure is secured, monitored, and prepared to respond rapidly and effectively to minimize damage. Lastly, analysts warn of massive DDoS attacks making a significant comeback against companies worldwide. Threat actors have been known to cripple entire networks for weeks, rendering internet services inoperable until the flood of network packets subside. The return of these attack vectors is inevitable and will be at the hands of ruthless threat actors whose alliances fall with the enemy.

Link to Ankura CTIX Deep Dive Report