


It isn’t just creating a perception of potential threat. The war in Ukraine has served as a reminder – if ever it was needed – that the Russian threat isn’t just talk. This isn’t to downplay Russia’s profile, of course. “In the context of Russia, this has actually helped organisations as they’ve been forced into having these conversations and defence discussions.” Threat variety He adds: “World leaders and heads of state are now starting to intervene much more directly in tackling ransomware as a result of its proliferation, understanding that it now has a critical impact on not just network security, but national security as well. Ultimately, knowledge of prominent threats can, and should, empower network defenders.”Ĭollier’s reason for optimism comes despite seeing the cyber landscape evolve during the pandemic, with cyber espionage usurped by ransomware as the most pressing challenge. Moreover, by focusing on common Russian attack techniques, security functions are able to significantly reduce their exposure. Russian state threats certainly require some specific planning, yet we should never forget how important security fundamentals are. “In that sense, it offers strategy to organisations. Jamie Collier, senior threat intelligence adviser at Mandiant, says: “The hardening guide essentially lays out some very common security controls by mapping the types of attack we have seen conducted by Russia in the past. This is something that Mandiant, a global cyber defence leader, has looked to encourage through its dedicated hardening guide, which has sought to contextualise the real Russian threat. If part of the attack strategy is to simply create a sense of fear or uncertainty, then focusing instead on the most rudimentary and robust protection protocols can take some of that indecision away. However, reassuringly, it also gives reason for governmental response teams, and cyber security specialists, to be optimistic about future resilience. At first glance, it is this variation that causes concern, alongside the general mystery of Russia as an entity. Despite Russia’s very sophisticated cyber capabilities, there is still a common set of techniques and tactics used across its diverse actor matrix.
