We have seen Chinese and Iranian state actors leveraging this vulnerability, and we anticipate other state actors are doing so as well, or preparing to, we believe these actors will work quickly to create footholds in desirable networks for follow on activity which may last for some time.

John Hultquist

Banks are taking a hard look at Iranian threat actors right now. We've advised all of our clients in the critical infrastructure space to consider the historic hostile actions of Iranian actors given this new development.

They were in some very sensitive areas of airport networks where they could conceivably cause serious disruption.

latest-headlines

China uses cyber espionage pretty regularly when Chinese interests are at stake to better understand facts on the ground, we have evidence that they targeted at least one party that has been associated with the missile placements.

If it were done in retaliation we'd expect some sort of follow on disruption or destruction of it, which we didn't see. Typically, when we see cyber espionage actors, they prefer to stay quiet and remain on target where they can gather as much intelligence as possible.

It is a Russian actor operating with alignment to the interest of the state, whether or not it's freelance, we don't know.

Among its peers, North Korea is unique in their deep, active involvement in cybercrime, unlike other countries who may contract and bargain with domestic criminals, the North Korean state carries out cybercrime directly, against targets all over the globe.

Cyberattacks are often reversible and they are often carried out for their psychological effects, and in a situation when the Russians are already shelling cities, those effects are going to be fairly limited.

It's a perfect environment for chaos to hide in.

Cyber is an ideal tool for Russia to use prior to an invasion, you can use( cyber operations) to be aggressive, to signal( intent) and potentially erode the influence of your adversary before bullets fly or without necessary escalating the situation to war.

A lot of it is tweeting into the void.

They’ve clearly got a wide mandate that’s global. Someone is giving them pretty broad orders.

This is a good reminder that the GRU remains a looming threat, which is especially important given the upcoming Olympics, an event they may well attempt to disrupt.

If it is cyber espionage, then it one of the most effective cyber espionage campaigns we’ve seen in quite some time.

This broad action is a departure from that norm.