The EU Mobilises Its Cyber Rapid Response Team To Deal With Russian Attacks

The Ukrainian conflict is escalating and the tensions between the US, EU, UK and Russia have increased.

Russian troops have entered Ukraine, but it's not yet clear if that military incursion will be reinforced by more  cyber incursions targeting Ukraine and its allies. Fresh cyber attacks are thought to be imminent, as Russia's parallel army of cyber attackers stand ready to create havoc in networks and systems across the West.

Now, the European Union is activating its new cyber security team to help Ukraine fight off attacks from Russia.

The EU’s Cyber Rapid Response Team (CRRT) includes around 10 national cybersecurity officials of six European countries, Croatia, Estonia, Lithuania, the Netherlands, Poland and Romania, who can provide assistance to countries under cyber attack. The team falls under the EU's defense cooperation program PESCO  and this will be its first known deployment.

CRRT will allow the member states to help each other to ensure a higher level of cyber resilience and collectively respond to cyber incidents. CRRTs could be used to assist other member states, EU Institutions, CSDP operations as well as partners.  CRRTs will be equipped with a commonly developed deployable cyber toolkits designed to detect, recognise and mitigate cyber threats. Teams would be able to assist with training, vulnerability assessments and other requested support. The six “participating member states made a decision to activate the team,” said Margiris Abukevičius, vice minister at the Ministry of National Defence in Lithuania.

The move comes as Ukrainian cyber security services are on the receiving end of cyber threats and probing attacks as the conflict with Russia increases in scale.

Abukevičius said European officials will work out the details with Ukraine on how many and which experts it will devote to the operation. Sending the cyber team into Ukraine “is an option we’re considering,” Abukevičius said, adding it will depend on the type of support Ukraine requests.

A US cyber warfare officer has confirmed the increase and heightened threat of Russian cyber attacks against US companies, especially those dealing with the Pentagon or Ukrainian government entities, in the first steps to war between Ukraine and Russia. "Russia has targeted clear defense contractors, private companies that support the US military," the unnamed US cyber warfare officer told reporters. "So this is a normal tactic and we would expect this to be no different in the pre-hostilities for Ukraine. Specifically, any US contractors who are supporting Ukraine's government and military."

The Ukrainian government on February 18 asked for the EU’s support of cyber military officials, in a letter to EU leaders seen by POLITICO.

Kyiv’s Foreign Minister Dmytro Kuleba wrote to EU leaders that it would "welcome deployment to Kyiv" of the team of experts to evaluate "vulnerabilities of our key computer networks and systems." Kuleba also requested "additional technical equipment and software for strengthening the cybersecurity infrastructure" from the EU. EU foreign policy chief Josep Borrell recently told reporters that the EU “will send a mission of experts to help Ukraine to face cyber-attacks,” after meeting Kuleba at a meeting of European foreign affairs ministers in Brussels.

Kyiv's call for cyber reinforcements followed two major attacks on Ukrainian government networks in recent weeks.  Hackers have already posted messages on government websites and spread malware to wipe out data. Government websites were also taken down by an avalanche of traffic targeted at them.

The country suffered attacks on its elections in 2014 and on its energy grids in 2015 and 2016. The country was also the epicenter of a global malware outbreak known as "NotPetya" that quickly spread across the world, crippling multinationals like the Danish shipping giant Maersk, logistics giant FedEx and numerous others.

Both the European Union and NATO have has invested in projects schemes supporting Ukraine’s cyber security and digital infrastructure for several years. The country is seen as a front line in global cyber conflict and a testbed for intelligence services to deploy offensive cyber and espionage tools.

In Britain the Home Secretary and the national spy agency GCHQ have urged private companies and public services to take "pre-emptive measures" to defend themselves against an attack.

PESCO Europa:   European Defence Agency:     Politico:     Newsweek:   Telegraph:    Beckers Health IT:     

BankInfoSecurity:

You Might Also Read: 

NATO & Ukraine Agree Deeper Cyber Co-operation:
 

« Financial Services, Online Banking & Cyber Security
New Tools To Simulate Electronic Warfare »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Blueliv

Blueliv

Blueliv is a leading provider of targeted cyber threat information and intelligence. We deliver automated and actionable threat intelligence to protect the enterprise and manage your digital risk.

North American Electric Reliability Corporation (NERC)

North American Electric Reliability Corporation (NERC)

NERC is a not-for-profit international regulatory authority whose mission is to assure the reliability and security of the bulk power system in North America.

AFCON Control & Automation

AFCON Control & Automation

AFCON is a leading global provider of software solutions and services for the smart management of Control & Automation systems in the age of Digital Transformation.

DCIT

DCIT

DCIT is a specialist in providing comprehensive consulting and auditing services in the field of information technology, PROVYS development software and security system AuditSquare.

Cyanre

Cyanre

Cyanre delivers state of the art cyber forensic services through software technologies and procedures that exceed conformities of major law enforcement agencies across the globe.

MerlinCryption

MerlinCryption

MerlinCryption develops infrastructure security software, delivering advanced encryption, authentication, and random data generators, for Cloud, VoIP, eCommerce, M2M, and USB hardware.

Ledger

Ledger

Ledger is a leader in security and infrastructure solutions for cryptocurrencies and blockchain applications using its proprietary technology.

Empiric

Empiric

Empiric is a multi-award winning technology and transformation recruitment agency specialising in data, digital, cloud and security.

Tech-Recycle

Tech-Recycle

Tech-Recycle was formed to help companies and individuals securely, ethically and easily recycle their IT and office equipment. We destroy all data passed to us safely and securely.

Iterasec

Iterasec

Iterasec provides a full range of security services to hacker-proof your products and make software engineering process secure by design.

Aware

Aware

Aware is the only comprehensive AI solution for governance, risk, compliance and insights for leading collaboration platforms.

FDD Center on Cyber and Technology Innovation (CCTI)

FDD Center on Cyber and Technology Innovation (CCTI)

The Foundation for Defense of Democracies is a nonprofit research institute focusing on foreign policy and national security. Ares of focus include cyber security and technology innovation.

European Data Protection Supervisor (EDPS)

European Data Protection Supervisor (EDPS)

The EDPS is the European Union’s independent data protection authority. We monitor and ensure the protection of personal data and privacy when EU institutions and bodies process personal information.

Lakera

Lakera

Lakera empowers developers and organizations to build GenAI applications without worrying about AI security risks.

ThreatCaptain

ThreatCaptain

ThreatCaptain is a Cybersecurity Leadership Development Company driven to enhance and illuminate cybersecurity risk through strategic alignment and informed business decision-making.

Adaptive Security

Adaptive Security

Adaptive is a next-generation cybersecurity platform. We're working with pioneering security teams to protect critical systems from AI-powered cyber attacks.