Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Understanding the Russian Cyberthreat to the 2026 Winter Olympics

Summary: Unit 42 assesses that Russia's exclusion from the Milano Cortina 2026 Winter Games removes a geopolitical guardrail, with Russian officials framing the ban as a political attack on state legitimacy rather than a regulatory matter. The report traces an escalating pattern of Russian-linked cyber operations against past Games: Fighting Ursa (GRU) breached WADA in 2016 and leaked athlete data, Razing Ursa deployed Olympic Destroyer malware against 2018 Pyeongchang infrastructure with false-flag tactics, and Storm-1679 and Storm-1099 used AI-generated disinformation ahead of Paris 2024.

Key Takeaway: With no Russian national team in competition, the reputational and competitive deterrents that once constrained disruption are reduced, and Unit 42 argues the threat model has shifted from espionage to disruption - meaning defenders at the Games' digital perimeter should weigh resilience and zero-trust visibility over protection of physical infrastructure alone.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related