In the ongoing conflict between Ukraine and Russia, a remarkable development has emerged, one that blurs the lines between conventional warfare and the virtual battleground. Ukraine’s recently formed “IT army” has taken center stage, wielding the power of cyber-attacks and data theft against Russian government entities and high-profile targets, including energy giant Gazprom. This unprecedented phenomenon has not only reshaped the landscape of warfare but has also raised complex legal and ethical questions on the role of cyber combatants in modern conflicts.
The IT army is a decentralized force, comprising thousands of volunteer members from across the globe, who utilize Twitter and Telegram channels for communication, coordination, and reporting on their actions. Their activities have encompassed a wide range of cyber-attacks, from the theft and exposure of sensitive information to the successful disruption of Russian communications and critical networks. These actions are strategically aimed at hindering Russian war efforts.
The genesis of Ukraine’s IT army can be traced back to February 26, 2022, when Ukrainian Vice-Prime Minister Mykhailo Fedorov issued a global call to arms for hackers willing to join the IT army and support Ukraine’s defense against Russian cyber-attacks. This novel approach marked the first time a state official openly solicited hackers worldwide to join a nation’s military defensive efforts against an invading force, incorporating them into hybrid military operations.
Interestingly, Ukraine’s IT army also finds support from hacktivist groups that are not directly affiliated with Ukraine but share a common goal of opposing Russian actions. Together, they have launched audacious cyber-attacks, leaving a significant impact on the Russian landscape.
One noteworthy attack in 2022 targeted Russia’s authentication system, Chestny Znak, responsible for labeling products with a unique ID and barcode. This assault overwhelmed Chestny Znak’s servers, rendering it nonfunctional and resulting in widespread disruption with significant economic repercussions. This incident even led the Russian government to reconsider certain labeling policies.
Moreover, the IT army and hacktivist groups have infiltrated Russian radio and TV stations, embedding video snippets about the war in Ukraine into programs and broadcasting fake air raid alerts. For instance, in June 2023, Russian state TV channels were hacked to show a video purportedly created by the Ukrainian Ministry of Defense, featuring footage of Ukraine’s military operations, accompanied by a message in Ukrainian reading “the hour of reckoning has come.”
In response to the rallying of hackers for Ukraine, Russian groups, such as Killnet, Sandworm, and XaKnet, have initiated their own cyber-attacks on Ukrainian and Western targets. These Russian cyber-attacks began well before the invasion and escalated in February 2022, targeting various Ukrainian networks, including a major attack on the Viasat satellite communications system to hinder the monitoring of Russian troop movements during the invasion.
The ramifications of this conflict extend beyond the borders of Ukraine. The Viasat cyber-attack on February 23 had spillover effects, affecting thousands of German wind turbines by disrupting their remote control systems. This event underscores the global implications of cyber warfare in modern conflicts.
Beyond the immediate cybersecurity concerns, the creation of Ukraine’s IT army has ignited discussions about the role of cyber warfare in real-world military operations. A pressing question arises: Should groups like the IT army be considered combatants rather than civilians, potentially affecting their legal status under international law?
Some countries, such as Estonia, have already established formal cyberforce reserves, and Ukraine is considering a similar move for its IT army. The decentralized nature of hacker groups, often referred to as “cyberguerillas,” introduces an element of unpredictability, raising concerns about the potential for conflicts to escalate across borders.
International efforts have been made to apply the law of war and international humanitarian law to cyber operations, resulting in documents like the Tallinn manuals. However, many of the issues brought to light by the IT army remain contested, as these documents are not legally binding.
As the use of AI tools in cyber-attacks becomes increasingly prevalent, the landscape of information warfare will evolve in the coming years. It is imperative that concerted efforts are made to address the practical and legal concerns surrounding cyber warfare before the new age of cyber conflict fully emerges.
In conclusion, Ukraine’s IT army represents a significant evolution in modern warfare, demonstrating the power of global hacker communities in shaping the outcome of conflicts. This phenomenon has not only altered the dynamics of warfare but has also prompted important discussions about the role and legal status of cyber combatants in contemporary military operations. As the world grapples with the complexities of cyber warfare, a concerted effort to address these issues is crucial to prevent further escalation and ensure international security in this digital age.
