Russia looking to target countries that oppose Ukraine invasion with cyber attacks, GCHQ director warns

Russia is looking to target countries opposing the invasion of Ukraine with cyber attacks, the director of GCHQ has warned.

Addressing a conference in Newport on Tuesday, Sir Jeremy Fleming said the conflict was “spilling over” into other nations in the information and online space.

“Perhaps, the concept of a ‘cyber war’ was over-hyped, but there’s plenty of cyber about including a range of activity we and partners have already attributed to Russia,” he added.

“We’ve seen what looks like some spillover of activity affecting other countries. And we’ve seen indications that Russia’s cyber operatives continue to look for targets in countries that are opposing their actions.”

He did not name specific nations that could be targeted, but said the security services were increasing efforts to “protect the digital homeland” by ensuring the government and British businesses improve their resilience.

Sir Jeremy said the UK was also supporting Ukraine to shore up its cyber defences, but that the country was “excelling” in information warfare.

“We’re also seeing this conflict in near real time in information, cyber and technology spaces,” he told the CyberUK conference.

“It is already a remarkable feature of this war just how much information about the behaviours and tactics of the Russian forces are out there in the public domain - and how much intelligence has been released by Western allies to challenge and get ahead of Putin’s actions.

“This is modern warfare influenced and shaped by the democratisation of information. And thankfully, the Ukrainians are excelling at it - we’re proud to be playing our part in supporting their efforts.”

It is the first in-person conference held by the National Cyber Security Centre (NCSC), a public-facing arm of GCHQ that focuses on cyber defence, since 2019.

Sir Jeremy said the pandemic had seen criminals “constantly evolve tactics” as people increasingly rely on online services.

Putin marks Victory Day with little to show for 11-week war

Show all 17

He warned that “lines are blurring” between criminal and hostile state activity, such as with ransomware attacks, and that the commoditisation of data has “obvious implications for future security”.

China was singled out as a particular threat, for going “further and faster” with secretive technology “imbued with their authoritarian values”.

The UK has formed a “National Cyber Force” comprised of intelligence and defence staff aiming to increase defences, counter disinformation, supporting overseas military activity and supporting police tackling criminal gangs.

Sir Jeremy told the conference that the UK was using its capabilities in “a legally, proportionate and ethical way” and would “oppose those who do not share our core values and interests”.

“The global shifts we are seeing will take decades to resolve,” he added. “While I can’t predict how things will turn out, I can confidently say that cyber and cyber security will continue to be pivotal.”