Joint Cybersecurity Advisory on the Possible Russian State Sponsored Threat to Critical Infrastructure

On April 20, the Cybersecurity and Infrastructure Security Agency (CISA) released a joint cybersecurity advisory warning organizations of the possible malicious cyber threats stemming from Russia’s invasion of Ukraine. The statement was joined by the cybersecurity authorities of Australia, Canada, New Zealand and the United Kingdom. 

The CISA alert describes indications that the “Russian government is exploring options for potential cyberattacks” and cites recent “Russian state-sponsored cyber operations [that] have included distributed denial-of-service attacks” and the deployment of destructive malware against the Ukrainian government and critical infrastructure organizations. 

The CISA alert builds upon existing mitigation recommendations regarding Russian state-sponsored cyber threats to U.S. critical infrastructure and provides an overview of  “Russian state-sponsored advanced persistent threat group." The cybersecurity authorities of the Five Eyes Alliance also urge “critical infrastructure network defenders to prepare for and mitigate potential cyber threats…by hardening their cyber defenses and performing due diligence in identifying indicators of malicious activity.” 

You can read the joint cybersecurity advisory here or below.