Messenger Comparison

Ukrainian Cyber Defense: Stable, but new tactics and actors observed | Serhii Demediuk posted on the topic | LinkedIn

Ukrainian Cyber Defense The situation on the cyber front remains stable, with no critical changes. Throughout the last months of winter, russian hacker groups have primarily focused on obtaining intelligence from military situational awareness systems, compromising mobile devices to intercept communications of military personnel and government officials, and targeting the mobile devices of Ukrainian diplomatic representatives abroad. New tactics are being observed among russian hacker groups, leveraging social engineering to infiltrate government information and communication systems (ICS) and critical infrastructure. The most commonly exploited threat vector remains the Signal Messenger, with ongoing campaigns aimed at compromising the accounts of military personnel and government officials to extract intelligence for enemy operations. Following the suspension of U.S. military aid to Ukraine, #Signal’s administration has also stopped responding to requests from Ukrainian law enforcement agencies. As a result, Signal has become the second-largest abuse-resistant messenger. Additionally, at the end of February and the beginning of March 2025, an increase in malicious activity driven by financial gain has been observed. Notably, these threat actors are not only from russia but also from countries that have previously positioned themselves as Ukraine’s partners and allies. The most destructive and intelligence-driven activities have been carried out by the following threat actors: UAC-0001, UAC-0010, UAC-0002, UAC-0006, UAC-0020, UAC-0024, UAC-0091, UAC-0091, UAC-0133, UAC-0150, UAC-0173, UAC-0212, UAC-0218, UAC-0050, and UAC-0057. A separate focus should be placed on UAC-0057, attributed to the intelligence services of the Republic of Belarus, which until recently conducted their operations exclusively against EU countries. Does this indicate yet another shortage of russian “specialists” and a lack of necessary capabilities? This issue is under investigation. The war continues!