Recorded Future Warns Russian Hybrid Threats in Europe Could Escalate
Summary
Recorded Future says Russia is using cyber, influence, and physical tactics to pressure European countries and test defenses, and warns these operations could become more coordinated. It recommends phishing-resistant MFA against cyber-sabotage risks.
Key points
- Recorded Future describes Russian hybrid activity as a mix of psychological, cyber, and physical tactics aimed at testing defenses, disrupting infrastructure, and fostering fear.
- Reported examples include impersonation of European media by the CopyCop disinformation network, drone incursions, and alleged threats to energy and cargo infrastructure.
- The report says Russian cyber operations have sought access through internet-facing firewalls, VPNs, email services, and web portals.
- Companies supporting Ukraine’s war effort, including logistics, dual-use, and specialized equipment firms, may face elevated targeting risk.
- Recorded Future expects Russia could escalate over the next two years, potentially using multiple tactics concurrently to strain NATO resources.
- The report recommends phishing-resistant multifactor authentication to reduce cyber-sabotage risk.
Article Details
- Event Type
- Reported Russian hybrid warfare activity across Europe, combining influence operations, cyberattacks, and physical actions or threats against infrastructure.
- Impact
- Reported activity has targeted or threatened public and critical infrastructure, including water and wastewater, energy, cargo, and offshore gas infrastructure. The article describes potential disruption, fear, and pressure on NATO defenses; it reports no quantified damage or confirmed overall impact.
People
Chelsea CederbaumSenior threat intelligence analyst at Recorded Future and author of the blog post discussed in the article.John GallagherVice president at Viakoo who commented on Russia's New Generation Warfare framework.Vladimir PutinIdentified as Russian President in the article's discussion of Recorded Future's assessment that Russia may escalate aggression across Europe.
Threat Actors
Vendors
Countries
Estoniaas a reactive, defensive posture. Russian drones have reportedly violated NATO airspace by flying near Estonia's border. And Romanian authorities intercepted and destroyed a Russian drone detected near Romania'sFranceFor example, last month Russia's CopyCop disinformation network reportedly impersonated localized news and fact-checking outlets across Europe, particularly in France and Norway, using AI-generated text and voice.GermanyNorwayThere are the recent water and wastewater attacks targeting Norway and Poland, for example.PolandThere are the recent water and wastewater attacks targeting Norway and Poland, for example.Romanianear Estonia's border. And Romanian authorities intercepted and destroyed a Russian drone detected near Romania's Neptun Deep offshore gas project in the Black Sea, according to the report. "Authorities determined theRussiaRussia continues to ramp up hybrid, asymmetric efforts to target its adversaries across Europe in both virtual and physical space, in support of its invasion of Ukraine, which began in February 2022.UkraineRussia continues to ramp up hybrid, asymmetric efforts to target its adversaries across Europe in both virtual and physical space, in support of its invasion of Ukraine, which began in February 2022.
Industries
Critical infrastructurea number of psychological, cyber, and physical tactics intended to test enemy defenses, degrade critical infrastructure, and foster fear within an enemy's government and population.EnergyAttacks against Poland's energy infrastructure at the beginning of the year were also attributed to Russia-aligned actors.logisticsAs such, "outside of traditional critical infrastructure, logistics and dual-use firms are at high risk," she says. "In addition, companies manufacturing specialized components that could aid in repairing damage fromWater and wastewaterThere are the recent water and wastewater attacks targeting Norway and Poland, for example.