Cyber Risks · Cisco Talos

Current executive guidance for ongoing cyberattacks in Ukraine

Summary: Cisco Talos reported DDoS attacks on Feb. 15 against Ukraine's Ministry of Defense and two large national banks, disrupting bank services for several hours, and further DDoS attacks confirmed as recently as Feb. 23 against the Ministry of Foreign Affairs, Ministry of Defense, Ministry of Internal Affairs and national banks. Talos also cited CERT-UA's assertion of a BGP hijacking attack against a Ukrainian bank around the same time, and said the Feb. 15 attacks were attributed to Russia by Ukraine, the U.K. and the U.S. and appeared to use a variant of the Mirai botnet.

Key Takeaway: Talos states plainly that targeted organizations are not the target but the tool, with adversaries choosing attacks to maximize public impact and pressure a government rather than to embarrass the victim - so an outage at your organization may be someone else's message.

Read the original at Cisco Talos ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026