Estonia Fears Cyber Attacks Will Rise Because Of War In Ukraine

Russia’s war on Ukraine is now being fought with bombs as well as bytes, causing European nations to engage with improving their cyber defence capabilities.

As cities in Ukraine come under attack from Russian forces, a digital offensive will often also be part of the invasion and this effect could increase under the threat of sanctions from the West.

One country they can learn a lot from is Estonia. The nation, which shares a border with Russia, was one of the first to come under attack from this modern form of hybrid warfare 15 years ago.

Since then, this small nation that has a population of 1.3 million people has built its cyber defence infrastructure and ranks third-best in the world behind the United States and Saudi Arabia, according to the Global Cybersecurity Index (GCI).

Estonia has been occupied twice throughout its history. The last time was by the Soviet Union, from 1940 until 1991. Since then, the country put in all the protections to ensure this could not happen again. “There was this short opportunity window when Russia was going in, I assume, by our estimates, the right direction. And then we used this opportunity window to join all the possible clubs that we could, which is NATO, which is the European Union,” Estonia’s Prime Minister Kaja Kallas said at a press gathering. “And then actually, we had people asking us, why do you need this? Because Russia doesn't pose a threat anymore. And we said, ‘we know our neighbour’”.

On 24 February, as Russian troops entered Ukraine, a cyber attack disrupted communication networks in Donbas. These attacks affected not only physical but especially space infrastructure. Cyber activity knocked out communication satellites from Viasat, an American firm providing space-based broadband services across Europe.

Consequently, the attacks affected Ukraine and other European customers that rely on the firm’s services. This invasion of Ukraine by Russia has brought back painful memories in Estonia. “Being in the geographical location where we are, you have two choices: Either to be with the West, to be with Europe or to be with Russia,” Kallas said.

Other countries that have recently followed Estonia’s path and are bidding to join NATO are Sweden and Finland. Asked how Russia could react, Kallas responded: “We are probably going to see cyber attacks. We're going to see some showing of power. But I think that's about it”. Kallas did not appear too worried about more possible cyberattacks. Perhaps because Estonia already learned the lessons of how to respond to them in the past.

The story begins in 2007 and comes down to a statue and fake news. The Bronze Soldier was unveiled by the Soviet authorities in 1947 and back then was called the “Monument to the liberators of Tallinn” and sat in the capital. Russian speakers in Estonia believe the monument represents the USSR’s victory over Nazism but for many ethnic Estonians, the Soviet soldiers were occupiers rather than liberators, and the statue is a reminder of that. In 2007, the Estonian government moved the Bronze Soldier from Tallinn to the outskirts of the city to a military cemetery. 

Protests were then triggered by false claims by Russian media that the statue and Soviet war graves were being destroyed by Estonia’s government. A day later, Estonia was hit by cyber attacks, which lasted weeks and knocked  out Estonian banks, government bodies and the media.

Exactly who was behind the attacks is unknown. The cyber attacks came from Russian IP addresses and the government has always denied any involvement.

“It has been called by many experts Web War one and at the time what the effect that had was that we really realised the vulnerability of the digital society and the digital infrastructure that we were building,” Luukas Ilves, Chief Information Officer for Estonia’s Government told Euronews. “It made us aware, maybe some years before the rest of the world, of the risks around cyber attack and cyber insecurity”.

Estonia is one of the leading digital nations and a large part of how the public interacts with the government is done digitally, from voting and paying taxes to setting up companies and verifying identity. The backbone of this digital society is X-Road, a software solution which acts like a distributed government information system and binds together different databases and different organisations. “If something happens to one part of the system, there is another part of the system that takes over, that everything is backed up into various locations, that you don't have a single point of failure,” Oliver Väärtnõu, CEO of Cybernetica, the company which developed X-Road, told Euronews.

When the same question was put to Estonia’s Prime Minister, she replied: “What I can tell you, because this is a very difficult position. I hear things in the secret rooms that I can't talk about. I would say that we don’t talk about things publicly but going to [cyber] offensive brings about different risks that you don’t put back in a bottle.. I can't say we don't and I can't say we do but I would answer that if we do, we are not talking about this,” she added when pushed on the topic.

While governments remain tight-lipped on the issue of cyber offence development, it appears to be an open secret and in Ukraine’s case a necessity.

“I think there is no real secret anymore that governments develop their offensive (cyber) capabilities. And partly why Ukraine has been successful is that they have created this cyber army that is putting on so-called active defence, which is an offensive defence to put it in other words,” said Väärtnõu.

Estonia’s government sees the development of cyber security as a constant investment and says it is always looking at ways to improve and build more complicated systems. The country also believes it can learn a lot from the war in Ukraine and should keep a close eye on Russian cyber activities.

Euronews:        Euronews:       NPR:       EPC:      Yahoo:    BizCrast

You Might Also Read: 

NATO Will Retaliate:

 

« An Airline Brought To A Standstill By Ransomware
Ransomware’s Serious Effects On Cyber Security »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Optimum Insurance

Optimum Insurance

Optimum's Cyber Risk & Data Protection Insurance policies are designed to protect against cyber exposures that arise when a company’s data and customer information is breached or stolen.

Planit Testing

Planit Testing

Planit is a leader in Quality Assurance and a specialist in software testing and training services.

Cansure

Cansure

Cansure is a leading insurance provider in Canada offering a broad range of property & casualty insurance solutions including Cyber & Data Breach insurance.

HITRUST Alliance

HITRUST Alliance

HITRUST provides widely-adopted common risk and compliance management frameworks, related assessment and assurance methodologies.

NanoVMs

NanoVMs

NanoVMs is the industry's only unikernel platform available today. NanoVMs runs your applications as secure, isolated virtual machines faster than bare metal installs.

Stefanini Group

Stefanini Group

Stefanini is a global IT services company providing a broad range of solutions for digital transformation including automation, cloud, IoT and cybersecurity.

NetBlocks

NetBlocks

NetBlocks is a global internet monitor working at the intersection of digital rights, cyber-security and internet governance.

tru.ID

tru.ID

We’re tru.ID, and we're reimagining mobile authentication, one API at a time.

Oxeye

Oxeye

Oxeye fills the gap between cloud and code to show exploitable vulnerabilities, and their path from API to code. More visibility. Less noise. More time to build.

Cyber Suraksa

Cyber Suraksa

We make security simple and hassle-free by offering a sustained and secure IT environment with next-gen cybersecurity solutions through a scalable security-as-a-service model.

Total Secure Technology

Total Secure Technology

Total Secure Technology provides trusted Managed IT Security and Managed IT Services for organizations looking to increase their cybersecurity defensive posture.

Astran

Astran

At Astran, we revolutionize data security by introducing a groundbreaking solution for data confidentiality headaches.

Mobilen Communications

Mobilen Communications

Mobilen are dedicated to providing our customers with the highest level of secure data in transit and to bring privacy back to a mobile world.

One Step Secure IT

One Step Secure IT

One Step provide Managed IT Services, Cybersecurity Protections, and Compliance to businesses in the USA nationwide.

Fraud.net

Fraud.net

Fraud.net operates the first end-to-end fraud management and revenue enhancement ecosystem specifically built for digital enterprises and fintechs globally.

Rankiteo

Rankiteo

At Rankiteo, we are pioneers in cybersecurity risk management. Our mission is to empower organizations with the tools they need to assess, enhance, and safeguard their digital landscapes.