In this commentary, the speaker links Russia's deteriorating military situation in Ukraine to an escalating cyber threat against the West. He argues that President Putin, frustrated by battlefield losses and international support for Ukraine, will intensify cyber operations to punish countries that aid Kyiv, sow dissent, disrupt critical services, and raise funds for the war. The speaker outlines the most likely Western targets—government and defense ministries, defense‑industry supply chains, financial institutions, oil and gas infrastructure, power grids, shipping and logistics, telecommunications, and media platforms. He then details the attack methods he expects Russia to employ: destructive wipers, sophisticated social‑engineering, disinformation campaigns, supply‑chain compromises (e.g., SolarWinds‑style), and ransomware used as a revenue stream. Finally, he offers a set of recommendations: governments should be prepared to retaliate; critical‑infrastructure operators must boost prevention, detection, and response capabilities; organizations should train staff, patch systems, enforce least‑privilege and zero‑trust controls, test disaster‑recovery plans, ensure strong cybersecurity leadership, and refuse to pay ransoms. He concludes by proposing a deeper threat‑assessment video and urges viewers to engage with the channel.
Chapters
As Putin's war on Ukraine reveals stunning failures of Russian forces, the embarrassed leader becomes more desperate. This has ramifications to the security of globally connected digital systems that we all use and rely upon. So let's talk about the rising threats, the likely targets, expected methods, and my recommendations to help mitigate the overall risks. Now, on September 21st, which was day 210 of Russia's war in Ukraine, Putin announced the mobilization of 300,000 citizen reservists to be sent to fight in Ukraine in hopes of reversing stunning losses. This is in addition to the sweeping new kinetic attacks targeting civilian critical infrastructures across Ukraine, and that included attacks on electrical power stations, dams, fuel storage, and rail transportation systems. The Ukrainian military counteroffensive has been reversing Russian gains, and Putin's demoralized troops are becoming less effective. He is openly frustrated with the United States, Europe, and the United Nations for providing Ukraine with effective weapons material intelligence, and financial support. Putin's anger and petulance often manifests in a desire to persecute anyone who is unwilling to capitulate to his will, as demonstrated by the extraordinary number of executives' deaths in suspicious circumstances. Apparently, falling out of windows seems to be a common problem for high-profile petroleum executives and political adversaries who oppose the war. Um, gravity seems to have a greater effect on Putin's adversaries. We just saw over almost a dozen people that have died under suspicious circumstances because of falling downstairs, off of balconies, off of buildings, things of that sort. Now, his national police forces are also particularly swift and brutal when it comes to arresting Russian protesters or anyone openly opposing the war or calling the conflict as a war instead of the politically mandated term special operation. Penalties for these crimes can be up to 15 years in prison. Putin's autocratic mindset will fuel actions that reach beyond his borders to punish the governments and peoples of other countries who don't support his illegal acts. One of his greatest means is the use of cyberattacks, specifically against the West. So with his mindset and his capabilities, we see and predict that there's going to be more attacks. Now, although the West has seen an uptick in the continuous stream of cyber— cyberattacks coming from Russia and its proxy since the beginning of the war, most of them have been ineffective due to Russia's miscalculation. Now, I expect these errors have been corrected over the past several months, and Russia is fielding a much better capability to launch cyber attacks without dependencies on organizations that have proven disloyal to his regime. With the new digital warfare capability Here are my summary predictions for his targets and his methods. Putin will target Western countries that are materially supporting Ukraine's ability to militarily defend itself, have publicly opposed Russia's war on Ukraine, or are specifically critical of Putin himself. The United States is at the top of the list, accompanied by other NATO countries and a few more nations around the globe. Putin's goals will be to cause dissent among the citizens of these target countries, disrupt the future flow of weapons and funding to Ukraine, and to a lesser degree, obtain hard currency to fund the Russian government's ambitions. Financial goals will target any organization that can be easily extorted. To achieve the disruption goals, however, the prime targets will be national critical infrastructures. Specific sectors that I think will feel the greatest brunt of these attacks include government services and defense departments, really to undermine citizen confidence and impact direct support of Ukraine. Defense industries, who are the suppliers of Western weapons, many of which are finding their way to Ukraine. The finance sector, like banks, exchanges, payroll companies, investment groups, and other funding groups. There's nothing like undermining confidence of a populace when they can't get to their finances or their money. The next area is the gas and oil infrastructure, and this includes the entire chain from suppliers, carriers, refiners, and distributors. And this is an area that Russia already has the natural resources, and they want to get them out to the open market. But because of, uh, controls and limitations, they're not able to do that. So to impact the rest of the world hopefully will help undermine sanctions, or at least weaken them. Power generation and distribution networks. Again, when the lights go out, confidence goes down. This can be hugely disruptive to economies, to people, to confidence. May give the populations around the world a second thought of whether they really want to support Ukraine. Now, the shipping and logistics area will also be targeted, specifically cargo shipping and transportation, but also railways, air, and road shipments. Telecommunications will also be targeted. This is terrestrial, undersea, and satellite-based telecommunications that the West heavily use. Media, news, and social outlets that show Russia in unflattering ways, like failures and atrocities, and provide information that contradict Russian government narratives, as well as those services that enable citizens the means to aggregate dissenting voices, will be on the target list. The methods Putin's cyber forces will use are rather straightforward in regards to disruption. Expect wipers to be the main weapons for systems that are compromised. Wipers are malicious code that, when deployed, seek to destroy data systems and computer infrastructures in order to render the target unable to operate effectively. Second is social engineering, and this will continue to be used as a first step to gain entry into targets. Russia has the ability to establish elaborate infrastructures to lure or masquerade and fool people into undermining their security. This will target trusted insiders to compromise the organizations they work for. Third, social misinformation and disinformation campaigns. They're going to continue to increase, and Putin is a master at creating propaganda for false narratives, blaming others, and outright denial of their actions. Expect these campaigns to continue with tiresome themes just to justify the war on Ukraine, spin battle loss stories in favor of Russia, showcase the the glory of their leader and vilify anyone who opposes them. Now, we're also going to see the return of supply chain attacks. Perhaps the most disturbing method will be the use of these types of attacks to scale up their disruption activities. As we saw in the 2020 SolarWinds hack, the Russian intruders were able to gain access to thousands of their customers But in that case, they acted in ways just to gather information, and they actually purposefully avoided damaging the victims. This is going to change. I expect upcoming supplier attacks will be focused on gaining access to large numbers of important targets so they can deploy wipers or other disruptive attacks, and this is very, very concerning. Now, the fifth area is good old ransomware, right? Ransomware is the Russian fundraiser. It is a favorite of Russia to fleece Western companies of vast amounts of money. I cannot imagine how this pleases Putin to have the decadent companies in the West fund his efforts. Now this is going to continue at an upbeat pace, but we'll take a backseat to the more strategic disruption goals that he has. Still expect more digital extortion attempts in the future. And lemme remind you that each payout will go to fund Russia's war efforts, their political aggression, disinformation campaigns, and violations of human rights. So recommendations, what should we and the governments and companies of Western nations do to prepare for these potentially crippling and embarrassing cyberattacks? Here's my list of recommendations. Governments should be ready to strike back. Since the Russians can't rely on third-party cyber mercenaries as they did in the past, they will need to conduct operations with their own trusted personnel. The trade-off is the attacks are more likely to be attributed back to the Russian government agents. If cyberattacks are determined to be originating from Russia, then victimized governments should hit back hard with equitable attacks. They don't need to be targeting the same sectors, but a show of force is necessary to convey that there will be consequences to offensive operations, even in cyberspace. Two, critical infrastructure sectors must make proactive plans to increase their preventative, detective, and responsive capabilities, especially against the predicted methods previously outlined. Specific sectors will be targeted for disruption while all sectors will be assaulted with ransomware. 3, improve the cybersecurity savvy of employees. Train employees, contractors, and partners to better identify, avoid, and report social engineering attacks. Fourth, update systems, close vulnerabilities in the operations and in products, and protect all accounts that can do administration-type functions. Fifth, limit access to systems, networks, and data to only what is necessary. Permissions cleanup, apply micro-segmentation and zero-trust principles, account audit reviews, removal of automated logins, and purge unneeded data. Sixth, review, update, and actually test disaster recovery and business continuity plans. Verify data is being backed up and can be restored. Include upstream suppliers, vendors, and downstream partners. Test crisis response teams, processes, and plans. 7, make sure you have proper cybersecurity leadership. You have to have executive support, tools, and abilities to define clear risk goals, and achieve them. Eighth, and this one's important, don't pay ransomware. Do what you need to do, but paying ransomware is fueling the very nation that is attacking. Congress should pass regulations if necessary to outlaw the payments of digital extortion because this is now a crucial issue that has ramifications that is measured in lives. Overall, cybersecurity must improve in its efficiency, consistency, and comprehensiveness. Those organizations who prepare will be easily differentiated from those who don't take proactive steps. So in summary, Putin's unprecedented acts to wage war have created a global crisis The failures on the battlefield have forced him into a corner where he's escalating on all fronts to lash out at all who oppose him. Cyberattacks on the digital front will be among the many tools he will employ. We need to be ready as potentially devastating attacks are coming. It is just a matter of time. I am considering creating a video on the assessment of Putin's nation-state forces as a cyber threat actor. Understanding the enemy is hugely important to predicting their actions. Painting a picture of their motivations, objectives, and capabilities will reveal the type of targets and attacks they will pursue. The methods they are most likely to employ can be determined by considering the defenses they will encounter and the extent they are willing to do harm or be exposed. This is normal threat agent assessment work that I and others do in the industry. Let me know if you would be interested in such a video. Thanks for watching, and as always, hit the like button, subscribe if you want to hear more inside fights and rants in regards to cybersecurity. Thank you much.
