London Daily

Focus on the big picture.
Sunday, Sep 20, 2026

The 3 Russian cyber-attacks the West most fears

The 3 Russian cyber-attacks the West most fears

US President Joe Biden has called on private companies and organisations in the US to "lock their digital doors", claiming that intelligence suggests Russia is planning a cyber-attack on the US.

The UK's cyber-authorities are also supporting the White House's calls for "increased cyber security precautions", though neither has given any evidence that Russia is planning a cyber-attack.

Russia has previously stated that such accusations are "Russophobic".

However, Russia is a cyber-superpower with a serious arsenal of cyber-tools, and hackers capable of disruptive and potentially destructive cyber-attacks.

Ukraine has remained relatively untroubled by Russian cyber-offensives but experts now fear that Russia may go on a cyber-offensive against Ukraine's allies.

"Biden's warnings seem plausible, particularly as the West introduced more sanctions, hacktivists continue to join the fray, and the kinetic aspects of the invasion seemingly don't go to plan," says Jen Ellis from cyber-security firm Rapid7.

Here are the hacks that experts most fear.

BlackEnergy - targeted critical infrastructure attack


Ukraine is often described as the hacking playground of Russia, which has carried out attacks there seemingly to test techniques and tools.

In 2015 Ukraine's electricity grid was disrupted by a cyber-attack called BlackEnergy, which caused a short-term blackout for 80,000 customers of a utility company in western Ukraine.

Ukraine's energy grid has been attacked twice by hackers


Nearly exactly a year later another cyber-attack known as Industroyer took out power for about one-fifth of Kyiv, the Ukrainian capital, for around an hour.

The US and EU named and blamed Russian military hackers for the attacks.

"Russia could absolutely try to execute an attack like this against the West as an illustration of capabilities and to make a statement," says Ukrainian cyber-security responder Marina Krotofil, who helped investigate the power-cut hacks.

"However, no cyber-attack against a power grid has resulted in an extended interruption of power supply. Executing cyber-attacks on complex engineering systems in a reliable way is extremely difficult and achieving a prolonged damaging effect is sometimes impossible due to in-built protections."

Experts like Marina also hypothesise that this could backfire on Russia too, as the West most likely also has a decent foothold in Russian networks too.

NotPetya - uncontrollable destruction


NotPetya is thought to be the most costly cyber-attack in history and has been blamed on a group of Russian military hackers by the US, UK and EU authorities.

The destructive software was hidden in an update of popular accounting software used in Ukraine, but spread worldwide destroying the computer systems of thousands of companies and causing approximately $10bn of damage.

North Korean hackers are accused of causing huge disruption with a similar attack a month earlier.

This is what victims of WannaCry saw on their computers


The WannaCry "worm" (a kind of virus) scrambled data on approximately 300,000 computers in 150 countries. The UK's National Health Service was forced to cancel large numbers of medical appointments.

"These kinds of attacks would cause the greatest opportunity for mass chaos, economic instability, and even loss of life," says Jen Ellis.

"It might sound far-fetched, but critical infrastructure often depends on connected technologies just as much as every other part of our modern lives and we have seen the potential for that with the impact of the WannaCry on UK hospitals."

However, computer scientist at the University of Surrey Professor Alan Woodward says such attacks carry risks for Russia too.

"These types of uncontrollable hacks are much more like biological warfare in that it's very difficult to target specific critical infrastructure in specific places. WannaCry and NotPetya saw victims in Russia too."

Colonial Pipeline - cyber-criminal attacks intensify


In May 2021 a state of emergency in a number of US states after hackers caused a vital oil pipeline to shut down.

Fears over fuel shortages spurred some US consumers to panic-buy petrol


Colonial Pipeline carries 45% of the East Coast's supply of diesel, petrol and jet fuel and the supply led to panic at the gas pumps.

This attack wasn't carried out by Russian government hackers, but by the DarkSide ransomware group, which is thought to be based in Russia.

The pipeline company admitted to paying criminals $4.4m (£3.1m) in hard-to-trace Bitcoin, in order to get computer systems back up and running.

JBS, founded in Brazil in 1953, is the world's largest meat supplier


A few weeks later meat supplies were impacted when another ransomware crew called REvil attacked JBS, the world's largest beef processor.

One of the big fears experts have about Russian cyber-capabilities is that the Kremlin may instruct cyber-crime groups to co-ordinate attacks on US targets, to maximise disruption.

"The benefit of instructing cyber-criminals to carry out ransomware attacks is the general chaos they can cause. In large enough numbers they can cause serious economic damage," Prof Woodward says.

"It also comes with the added bonus of plausible deniability as these groups are a step removed from an attack by the Russian state."

How could the US respond?


In the highly unlikely case that a Nato country is on the receiving end of a cyber-attack that causes loss of life or huge irreparable damage, then this could trigger Article 5, the alliance's collective defence clause.

But experts say this would drag Nato into a war it does not want to be a part of, so any response is more likely to be from the US and close allies.

President Biden has already said that "we are prepared to respond" if Russia launches a large attack on the US.

However, the unprecedented cyber-chaos seen in Ukraine in recent weeks from vigilante hackers on either side of the war shows how easily things can escalate. So any action is likely to be extremely carefully considered.


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
Ed Sheeran Tour Faces Backlash After Macklemore Is Removed Over Pro-Palestinian Remarks
Vandalism of Traffic Cameras Intensifies Across Parts of England
Nearly 300 Evacuated as Fire Hits Grand Burstin Hotel in Folkestone
King Charles Warns AI Executives About Risks From Uncontrolled Technology
Church of England Apologises for Role in Historical Forced Adoption Practices
UK Debate Over Online Speech Intensifies After Arrest Figures Draw Scrutiny
Oxfordshire Village Holds Symbolic Independence Vote Over Asylum Accommodation Plan
Nigel Farage and Richard Tice Sue National Crime Agency Over Alleged Banking Data Leaks
Apple Introduces Stricter Age Checks for UK Accounts
BBC Cash Reserves Fall 66% to £125 Million as Broadcaster Restructures
McLaren Announces £500 Million UK Investment and Plans 1,000 Jobs
Green Party Wins Historic Gorton and Denton By-Election as Labour Falls to Third
Burnham Government Prepares October Budget Under Growing Fiscal Pressure
UK Energy Suppliers Pull Fixed-Price Deals as Wholesale Markets Turn More Volatile
Bank of England Holds Rates at 3.75% as Middle East Energy Shock Raises Inflation Risks
Addison Lee Founder Loses £20 Million UK Tax Tribunal Case
BrewDog Creditors Face Losses on About £190 Million of Debt
Harrods Seeks to Recover Abuse Compensation Costs From Mohamed Al Fayed’s Estate
Ed Davey Targets Reform UK as Liberal Democrat Conference Opens
Great Britain Retail Sales Rise 0.5% in August
NHS England Approves Life-Extending Treatment for Incurable Breast Cancer
Proposals to Limit NHS ADHD Diagnoses Draw Criticism From Patient Groups
Resolution Foundation Warns of Housing Cost Crunch for Low-Income UK Families
BBC Cash Reserves Fall to Decade Low as Annual Deficit Reaches £121 Million
Millisecond Software Error Triggered Major UK Air Traffic Control Disruption
Twenty Women Underwent Unnecessary Mastectomies During NHS Cancer Care
Sensitive UK Police Data Found Vulnerable to Access by Foreign Actors
British Steel Faces Renewed Pressure for a Long-Term Financial Plan
MPs Urge Government to End Thames Water Restructuring Talks With U.S. Hedge Funds
Andy Burnham Warns of Difficult UK Budget Choices as Inflation Returns to 3.1%
England Tightens School Food Standards With Restrictions on Deep-Fried and High-Sugar Foods
Oxfordshire Village Votes Symbolically to Leave UK Over Proposed Asylum Centre
Michael Marra Elected Leader of Scottish Labour
BBC Cash Reserves Fall Sharply as Financial Pressures Mount
George Osborne Calls for UK to Rejoin EU Customs Union
UK Explores Joining Canada-Led Global Defence Bank
Thirlwall Inquiry Highlights Management Failures Surrounding Lucy Letby Crimes
Parliamentary Committee Calls for New UK Law to Address AI Risks to Human Rights
UK Considers Giving Regional Mayors Greater Oversight of Water Companies
UK Opposition Presses Burnham for Stronger Response to Russian Security Threats
Reform UK Faces Scrutiny Over £72 Million in Donations as Political Finance Rules Tighten
Millisecond Software Failure Behind UK Air-Traffic Outage That Cancelled More Than 2,000 Flights
Bank of England Holds Interest Rate at 3.75% as Energy Prices Complicate Inflation Outlook
Burnham Warns of Difficult Choices in October Budget as UK Inflation Rises to 3.1%
Addison Lee Founder Loses £20.5 Million Non-Domicile Tax Case
BrewDog Creditors Face Heavy Losses After Collapse
Thirteenth Metropolitan Police Officer Dismissed Over Charing Cross Conduct
Oxfordshire Village Votes Symbolically to Leave UK Over Asylum Accommodation Plan
NHS Approves Life-Extending Treatment for Women With Incurable Breast Cancer
Software Defect Blamed for Major UK Air Traffic Disruption
×