London Daily

Focus on the big picture.
Sunday, Oct 04, 2026

The 3 Russian cyber-attacks the West most fears

The 3 Russian cyber-attacks the West most fears

US President Joe Biden has called on private companies and organisations in the US to "lock their digital doors", claiming that intelligence suggests Russia is planning a cyber-attack on the US.

The UK's cyber-authorities are also supporting the White House's calls for "increased cyber security precautions", though neither has given any evidence that Russia is planning a cyber-attack.

Russia has previously stated that such accusations are "Russophobic".

However, Russia is a cyber-superpower with a serious arsenal of cyber-tools, and hackers capable of disruptive and potentially destructive cyber-attacks.

Ukraine has remained relatively untroubled by Russian cyber-offensives but experts now fear that Russia may go on a cyber-offensive against Ukraine's allies.

"Biden's warnings seem plausible, particularly as the West introduced more sanctions, hacktivists continue to join the fray, and the kinetic aspects of the invasion seemingly don't go to plan," says Jen Ellis from cyber-security firm Rapid7.

Here are the hacks that experts most fear.

BlackEnergy - targeted critical infrastructure attack


Ukraine is often described as the hacking playground of Russia, which has carried out attacks there seemingly to test techniques and tools.

In 2015 Ukraine's electricity grid was disrupted by a cyber-attack called BlackEnergy, which caused a short-term blackout for 80,000 customers of a utility company in western Ukraine.

Ukraine's energy grid has been attacked twice by hackers


Nearly exactly a year later another cyber-attack known as Industroyer took out power for about one-fifth of Kyiv, the Ukrainian capital, for around an hour.

The US and EU named and blamed Russian military hackers for the attacks.

"Russia could absolutely try to execute an attack like this against the West as an illustration of capabilities and to make a statement," says Ukrainian cyber-security responder Marina Krotofil, who helped investigate the power-cut hacks.

"However, no cyber-attack against a power grid has resulted in an extended interruption of power supply. Executing cyber-attacks on complex engineering systems in a reliable way is extremely difficult and achieving a prolonged damaging effect is sometimes impossible due to in-built protections."

Experts like Marina also hypothesise that this could backfire on Russia too, as the West most likely also has a decent foothold in Russian networks too.

NotPetya - uncontrollable destruction


NotPetya is thought to be the most costly cyber-attack in history and has been blamed on a group of Russian military hackers by the US, UK and EU authorities.

The destructive software was hidden in an update of popular accounting software used in Ukraine, but spread worldwide destroying the computer systems of thousands of companies and causing approximately $10bn of damage.

North Korean hackers are accused of causing huge disruption with a similar attack a month earlier.

This is what victims of WannaCry saw on their computers


The WannaCry "worm" (a kind of virus) scrambled data on approximately 300,000 computers in 150 countries. The UK's National Health Service was forced to cancel large numbers of medical appointments.

"These kinds of attacks would cause the greatest opportunity for mass chaos, economic instability, and even loss of life," says Jen Ellis.

"It might sound far-fetched, but critical infrastructure often depends on connected technologies just as much as every other part of our modern lives and we have seen the potential for that with the impact of the WannaCry on UK hospitals."

However, computer scientist at the University of Surrey Professor Alan Woodward says such attacks carry risks for Russia too.

"These types of uncontrollable hacks are much more like biological warfare in that it's very difficult to target specific critical infrastructure in specific places. WannaCry and NotPetya saw victims in Russia too."

Colonial Pipeline - cyber-criminal attacks intensify


In May 2021 a state of emergency in a number of US states after hackers caused a vital oil pipeline to shut down.

Fears over fuel shortages spurred some US consumers to panic-buy petrol


Colonial Pipeline carries 45% of the East Coast's supply of diesel, petrol and jet fuel and the supply led to panic at the gas pumps.

This attack wasn't carried out by Russian government hackers, but by the DarkSide ransomware group, which is thought to be based in Russia.

The pipeline company admitted to paying criminals $4.4m (£3.1m) in hard-to-trace Bitcoin, in order to get computer systems back up and running.

JBS, founded in Brazil in 1953, is the world's largest meat supplier


A few weeks later meat supplies were impacted when another ransomware crew called REvil attacked JBS, the world's largest beef processor.

One of the big fears experts have about Russian cyber-capabilities is that the Kremlin may instruct cyber-crime groups to co-ordinate attacks on US targets, to maximise disruption.

"The benefit of instructing cyber-criminals to carry out ransomware attacks is the general chaos they can cause. In large enough numbers they can cause serious economic damage," Prof Woodward says.

"It also comes with the added bonus of plausible deniability as these groups are a step removed from an attack by the Russian state."

How could the US respond?


In the highly unlikely case that a Nato country is on the receiving end of a cyber-attack that causes loss of life or huge irreparable damage, then this could trigger Article 5, the alliance's collective defence clause.

But experts say this would drag Nato into a war it does not want to be a part of, so any response is more likely to be from the US and close allies.

President Biden has already said that "we are prepared to respond" if Russia launches a large attack on the US.

However, the unprecedented cyber-chaos seen in Ukraine in recent weeks from vigilante hackers on either side of the war shows how easily things can escalate. So any action is likely to be extremely carefully considered.


Watch: What is ransomware and how does it work?


Newsletter

Related Articles

0:00
0:00
Close
UK Police Release Six Iranian Nationals on Bail After RAF Fairford Security Alert
UK Business Confidence Falls as Energy Costs and Tax Uncertainty Rise
Cornwall Insight Warns UK Energy Bills Could Rise 16% in January
UK Introduces Zero VAT on Household Electricity Bills
UK 30-Year Gilt Yield Hits 6% as Bond Market Pressures Intensify
UK Introduces Stricter Subcontractor Checks and Expanded Trade Union Access
Green Party Proposes Three-Year Emergency Freeze on Private Rent Increases
UK Treasury Committee Seeks Tax Clarification Over Manchester City Investigation
Royal Marines Deploy to Faroe Islands for Northern European Security Exercise
UK Business Confidence Weakens as High Costs Delay Investment
UK GDP Growth Revised Up to 0.5% in Second Quarter
Bank of England Warns of Financial Stability Risks From Autonomous AI
UK Expands Early Prisoner Release Scheme to Ease Overcrowding
UK Records Worst Bluetongue Outbreak on Record Across Livestock Farms
UK Government Faces Shrinking Fiscal Headroom Ahead of October 28 Budget
UK 30-Year Gilt Yield Reaches 6% as Energy Shock Drives Borrowing Costs Higher
Church of England to Apologize for Role in Historical Forced Adoptions
UK Defence Ministry Investigates Historical Use of RAF Bases by Jeffrey Epstein
Scottish Housing Completions Fall to 11-Year Low
Welsh First Minister Calls for Expanded Devolution Settlement
UK Pledges £50 Million to Expand Domestic Military Drone Capabilities
UK Opens First Commercial Geothermal Plant in Cornwall
Green Party Wins Gorton and Denton By-Election as Labour Falls to Third
Prime Minister Andy Burnham Opens Review of UK-EU Relationship
UK Inflation Rises to 3.1%, Adding Pressure on Household Finances
UK Removes VAT From Domestic Electricity Bills to Ease Winter Energy Costs
Counterterrorism Police Arrest Sixth Suspect Over RAF Fairford Incident
UK Councils to Receive Sweeping Planning Powers to Ban New Vape and Betting Shops
Chancellor John Healey Faces Tax and Pension Scrutiny Ahead of Autumn Budget
Metropolitan Police Apologise for Accidental Disclosure in High-Profile Investigation
UK Universities Report Record International Enrolment as Housing Pressure Grows
UK Logistics Firms Monitor Rhine Disruption as Low Water Threatens European Supply Chains
UK Food Industry Warns Inflation Could Approach 7%
UK Introduces Vaping Duty and Mandatory Retail Stamps
Scotland Raises Property Taxes and Expands Child Payment in Annual Budget
Greggs Plans Four Factory Closures With 740 Jobs at Risk
OECD Raises UK 2026 Growth Forecast to 1.1%
UK Inflation Rises to 3.1% as Bank of England Faces Rate Debate
Andy Burnham Criticises Brexit and Says Rejoining EU Single Market Remains an Option
UK Imposes New Sanctions on Russian Military Networks and Propagandists
UK Launches Nationwide Early-Release Prison Scheme
Andy Burnham Says Security Services See Signs of Iranian Involvement in RAF Fairford Incident
Manchester City Found Guilty on Premier League Financial Charges After Independent Investigation
Scottish Court to Rule on Bid to Force No-Confidence Vote Against Aberdeen Council Co-Leader
UK Bans Extra Charges for Seating Children Under 12 Beside Accompanying Adults
UK Introduces Vaping Duty and New Licensing Requirements
Greggs to Close Four UK Factories and Cut 740 Jobs
Hundreds of Prisoners Released Early as England and Wales Prisons Reach 98% Capacity
UK Unveils New Russia Sanctions Targeting War Funding and Shadow Fleet
Burnham Says There Are Strong Indications of Iranian Involvement in RAF Fairford Security Breach
×