Oddbean new post about login | logout Kyiv attributes this shift to their improved cyber defenses, but also to shifting Russian priorities — they are, less and less, trying to take systems offline and, more and more, trying to collect information. That could be intel on prosecutions (particularly of other cyber criminals) or collecting information to dump online.
@fa6b2777 I hope you don't mind, Justin, but I cannot decipher in this post which 'they' or 'their refers to Ukraine and which to Russia.
There is a threat that Russian efforts — both kinetic and cyber — could ramp up against energy and critical infrastructure in the months to come. Moscow will likely trying to replicate its efforts from last year to plunge Ukraine into darkness. But the SSSCIP is now responsible for critical infrastructure protection, and says they've learned a lot over the past year.
Russian hackers' attempt to target war crimes prosecutors, the SSSCIP says, has ramped up but there's no effort, thus far, that Russia has managed to exfiltrate much data. They've seen no leaks thus far. "They are hunting what we know about specific people, specific groups, specific actions," an SSSCIP official says. They want to identify informants and spies. The Russians want to know if they need to "hide somebody from prosecution" or if they have to "eliminate the witness."
The SSCIP they face challenges because so many Ukrainian citizens are living under Russian occupation — and are having their internet filtered and monitored by Russian ISPs. But Kyiv tries its best to offer advice on how they can tunnel through the Russian filternet. "We call on them to take all the security measures that are possible, and not to be caught by the Russian Federation."