Update 21. 2022 Russia-Ukraine War — Cyber Group Tracker. December 19

2 min readDec 19, 2022

All groups tracked since February 2022

As we approach the end of the year I felt it would be worth providing an overview of all the groups I have tracked that have been engaged in some capacity in the Russia-Ukraine war in cyberspace.

You may have noticed i refuse to use the term ‘cyber-war’ as I do not think this is what we are seeing, instead we are seeing supportive operations in cyberspace which as a subset of information warfare is not new. It is however fascinating and as far as I am aware this is the most comprehensive and complete list ever collated of groups engaged in a war zone.

Below is what I have seen since February 2022 and includes 201 groups in total.

December 19 Russia-Ukraine CyberTracker — Cyberknow.

December 19 Russia-Ukraine CyberTracker — Cyberknow.

A Caveat: These are only the groups that I have tracked since February, my key metric is intent, it would be almost impossible to verify every group on this list as to their credibility for claimed attacks, however measuring intent gives an idea of just how congested and contested the battle space is.

Some insights:

  • Ukraine has had the largest amount of support, the majority of this was early on in the war — mostly from groups who have now moved to other causes, such as Iran.
  • Russia has seen the largest increase of support later in the war.
  • The majority of groups use Twitter and this is mostly used by Pro-Ukraine groups. Most Pro-Russian groups use Telegram, Telegram is also used by the main hacktivist groups that support Ukraine.

If you use my work or find it interesting please provide a shout-out it would be greatly appreciated.

For real-time updates:





Situational Awareness Updates | Threat Intelligence | OSINT | Threat Research | Memes | Cybersecurity