Security News > 2022 > March > Financially motivated threat actors willing to go after Russian targets

As Ukrainian organizations are getting hit with yet another data-wiping malware, financially motivated threat actors are choosing sides and some of them are expressing their willingness to target Russian targets.

A report released on Monday by Accenture revealed that a rift along ideological lines is happening on Russian-language criminal underground forums, with some threat actors sympathizing with the Ukrainian side.

"A recent survey by a member of one such forum examined how many actors were willing to target Russian entities; as of March 7, 2022, 83% said they were not, but a surprisingly high 17% indicated they were. Given the historical absence of CIS targeting and the fact that this forum is pro-Russia this indicates an unprecedented ideological divide," the researchers explained.

Pro-Ukrainian actors are refusing to sell, buy, or collaborate with Russian-aligned actors and are increasingly attempting to target Russian entities.

Pro-Russian actors are doing the same - some initial network access brokers have even offered discounts to pro-Russian actors interested in buying access to Ukrainian organizations, and are refraining from selling accesses associated with Russian entities.

The researchers have also noted an increased interest by pro-Russia threat actors to target organizations in countries that are considered to be "Enemies of Russia," and expect Western targets in the resources, government, media, financial and insurance industries to be hit.

News URL

https://www.helpnetsecurity.com/2022/03/15/threat-actors-russian-targets/