Russia's War on Ukraine
The impact of Russia’s attack on Ukraine transcends borders and is having global consequences. Recorded Future global intelligence experts are actively tracking the situation from all angles and are providing insights, perspectives, and mitigation strategies as the situation evolves. Here are our latest resources on this important topic. Check back often for updates.

Featured resources

Indicators of Compromise List: Russia’s War on Ukraine
To help you identify and analyze relevant cyber threats, we are making public Insikt Group’s list of indicators of compromise associated with threat actors and malware related to the Russian cyber actions against Ukraine. It will be updated regularly as new indicators are identified. This list is not intended for automated blocking, but to inform detection and response efforts.

Russian State-Sponsored Amplification of Bio Lab Disinformation Amid War in Ukraine
This report reviews Russian state-sponsored and US domestic narratives of alleged US bioweapon development facilities in Ukraine, before and during Russia’s ongoing invasion. It will be of most interest to government groups, journalists, and industry professionals seeking an understanding of the historical precedent, and where, how, and why Russian influence networks target US-supported biological research facilities with false or misleading information.

IsaacWiper Continues Trend of Wiper Attacks Against Ukraine
This report is a technical overview of the IsaacWiper malware reported by ESET on March 1, 2022. The malware was primarily delivered to Ukrainian organizations coincident with the Russian invasion of Ukraine. It is intended for those looking for a high-level overview of the malware’s tactics, techniques, and procedures (TTPs) and mitigations.
Related assets and stories

Russia’s Full-Scale Invasion of Ukraine Dr. Christopher Ahlberg, Recorded Future CEO, and Craig Terron and Brian Liston, Insikt Group

HermeticWiper and PartyTicket Targeting Computers in Ukraine By Insikt Group

‘They are fighting like lions’ By Dina Temple-Raston, The Record

Dark Covenant: Connections Between the Russian State and Criminal Actors By Insikt Group

The invasion of Ukraine started online long before troops marched on Kyiv By Daryna Antoniuk and Andrea Peterson, The Record

Second data wiper attack hits Ukraine computer networks By Catalin Cimpanu, The Record

US and UK expose new Russian malware targeting network devices By Catalin Cimpanu, The Record

WhisperGate Malware Corrupts Computers in Ukraine By Insikt Group