The EU Mobilises Its Cyber Rapid Response Team To Deal With Russian Attacks

The Ukrainian conflict is escalating and the tensions between the US, EU, UK and Russia have increased.

Russian troops have entered Ukraine, but it's not yet clear if that military incursion will be reinforced by more  cyber incursions targeting Ukraine and its allies. Fresh cyber attacks are thought to be imminent, as Russia's parallel army of cyber attackers stand ready to create havoc in networks and systems across the West.

Now, the European Union is activating its new cyber security team to help Ukraine fight off attacks from Russia.

The EU’s Cyber Rapid Response Team (CRRT) includes around 10 national cybersecurity officials of six European countries, Croatia, Estonia, Lithuania, the Netherlands, Poland and Romania, who can provide assistance to countries under cyber attack. The team falls under the EU's defense cooperation program PESCO  and this will be its first known deployment.

CRRT will allow the member states to help each other to ensure a higher level of cyber resilience and collectively respond to cyber incidents. CRRTs could be used to assist other member states, EU Institutions, CSDP operations as well as partners.  CRRTs will be equipped with a commonly developed deployable cyber toolkits designed to detect, recognise and mitigate cyber threats. Teams would be able to assist with training, vulnerability assessments and other requested support. The six “participating member states made a decision to activate the team,” said Margiris Abukevičius, vice minister at the Ministry of National Defence in Lithuania.

The move comes as Ukrainian cyber security services are on the receiving end of cyber threats and probing attacks as the conflict with Russia increases in scale.

Abukevičius said European officials will work out the details with Ukraine on how many and which experts it will devote to the operation. Sending the cyber team into Ukraine “is an option we’re considering,” Abukevičius said, adding it will depend on the type of support Ukraine requests.

A US cyber warfare officer has confirmed the increase and heightened threat of Russian cyber attacks against US companies, especially those dealing with the Pentagon or Ukrainian government entities, in the first steps to war between Ukraine and Russia. "Russia has targeted clear defense contractors, private companies that support the US military," the unnamed US cyber warfare officer told reporters. "So this is a normal tactic and we would expect this to be no different in the pre-hostilities for Ukraine. Specifically, any US contractors who are supporting Ukraine's government and military."

The Ukrainian government on February 18 asked for the EU’s support of cyber military officials, in a letter to EU leaders seen by POLITICO.

Kyiv’s Foreign Minister Dmytro Kuleba wrote to EU leaders that it would "welcome deployment to Kyiv" of the team of experts to evaluate "vulnerabilities of our key computer networks and systems." Kuleba also requested "additional technical equipment and software for strengthening the cybersecurity infrastructure" from the EU. EU foreign policy chief Josep Borrell recently told reporters that the EU “will send a mission of experts to help Ukraine to face cyber-attacks,” after meeting Kuleba at a meeting of European foreign affairs ministers in Brussels.

Kyiv's call for cyber reinforcements followed two major attacks on Ukrainian government networks in recent weeks.  Hackers have already posted messages on government websites and spread malware to wipe out data. Government websites were also taken down by an avalanche of traffic targeted at them.

The country suffered attacks on its elections in 2014 and on its energy grids in 2015 and 2016. The country was also the epicenter of a global malware outbreak known as "NotPetya" that quickly spread across the world, crippling multinationals like the Danish shipping giant Maersk, logistics giant FedEx and numerous others.

Both the European Union and NATO have has invested in projects schemes supporting Ukraine’s cyber security and digital infrastructure for several years. The country is seen as a front line in global cyber conflict and a testbed for intelligence services to deploy offensive cyber and espionage tools.

In Britain the Home Secretary and the national spy agency GCHQ have urged private companies and public services to take "pre-emptive measures" to defend themselves against an attack.

PESCO Europa:   European Defence Agency:     Politico:     Newsweek:   Telegraph:    Beckers Health IT:     

BankInfoSecurity:

You Might Also Read: 

NATO & Ukraine Agree Deeper Cyber Co-operation:
 

« Financial Services, Online Banking & Cyber Security
New Tools To Simulate Electronic Warfare »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Herjavec Group

Herjavec Group

Herjavec Group's Managed Security Services practice defends your organization from increasingly sophisticated, targeted cybercrime threats.

Joe Security

Joe Security

Joe Security specializes in the development of automated malware analysis systems for malware detection and forensics.

Backup112

Backup112

Backup112 has been delivering professional cloud backup services since 2004.

Future of Cyber Security Europe

Future of Cyber Security Europe

Future of Cyber Security Europe is a European wide event examining the latest cyber security strategies and technologies.

Securicon

Securicon

Securicon provides expert consulting for application, system and network security.

Secucloud

Secucloud

Secucloud GmbH is a provider of high-availability cyber-security solutions, offering a cloud-based security-as-a-service platform, particularly for providers.

Japan Cybersecurity Innovation Committee (JCIC)

Japan Cybersecurity Innovation Committee (JCIC)

JCIC is an independent and not-for-profit thinktank to establish a secure and safe digital society.

Baker Donelson

Baker Donelson

Baker Donelson is a law firm with a team of more than 700 attorneys and advisors representing more than 30 practice areas including Data Protection, Privacy and Cybersecurity.

Loki Labs

Loki Labs

Loki Labs provides expert cyber security solutions and services, including vulnerability assessments & penetration testing, emergency incident response, and managed security.

Managed IT Services

Managed IT Services

Managed IT Services is a managed IT Services Company offering a diverse range of Cyber Security services and IT solutions.

Armo

Armo

Armo technology enhances any Kubernetes deployment with security, visibility, and control from the CI/CD pipeline through production.

KSOC Labs

KSOC Labs

KSOC is an event-driven SaaS platform built to automatically remediate Kubernetes security risks.

PKI Solutions

PKI Solutions

PKI Solutions offers Public Key Infrastructure (PKI) products, services, and training to help ensure the security of organizations now and in the future.

Limes Security

Limes Security

Limes Security GmbH is the leading OT Security expert in the German-speaking region of Europe.

APIsentry

APIsentry

APIsentry is a leading provider of comprehensive API security solutions, specializing in protecting organizations from a wide range of cyber threats targeting their Application Programming Interfaces.

Knostic

Knostic

Knostic is an early stage startup developing a risk management and governance platform designed for enterprise large language models (LLM).