Russia could unleash disruptive cyberattacks against the US – but efforts to sow confusion and division are more likely

The Department of Justice indicted six officers of Russia's GRU military intelligence service in October 2020 on charges of hacking and deploying malware. Andrew Harnik – Pool/Getty Images

As tensions mount between Russia and the West over Ukraine, the threat of Russian cyberattacks against the U.S. increases. The Department of Homeland Security issued an intelligence bulletin on Jan. 23, 2022, warning that Russia has the capability to carry out a range of attacks, from denial-of-service attacks on websites to disrupting critical infrastructure like power grids.

“We assess that Russia would consider initiating a cyberattack against the Homeland if it perceived a US or NATO response to a possible Russian invasion of Ukraine threatened its long-term national security,” the DHS stated in the bulletin, which it sent to law enforcement agencies, state and local governments, and critical infrastructure operators.

Cybersecurity experts are concerned that in the wake of recent cyberattacks by hackers affiliated with Russia, the Russian government has the capability to carry out disruptive and destructive attacks against targets in the U.S. The SolarWinds attack, uncovered in December 2020, gave the perpetrators access to the computer systems of many U.S. government agencies and private businesses. The DHS and FBI accused Russian hackers in March 2018 of infiltrating U.S. energy and infrastructure networks.

Russian cyberattacks could include continued attempts to diminish Americans’ confidence in elections, undermine economic stability, damage the energy grid, and even disrupt health care systems.

While some components of these systems almost certainly remain vulnerable to Russian-aligned hackers, the Russian government is likely to think twice before unleashing highly disruptive attacks against the U.S., because the U.S. government could interpret such attacks, particularly those targeting critical infrastructure, as acts of war. The DHS bulletin stated that Russia has a high threshold for initiating disruptive attacks. As a researcher who studies cyberwarfare, I believe a more likely threat from Russian hackers is launching disinformation campaigns.

Contents

Distract, distort and divide

Americans can probably expect to see Russian-sponsored cyber activities working in tandem with propaganda campaigns. These activities are likely to be aimed at preventing a unified response to Russian aggression in Ukraine.

Russian military doctrine includes the well-evolved concept of information confrontation, which uses cyber means to create doubt about what is true. Russia’s information warfare strategy seeks to manipulate information and relationships.

The specific maneuvers aim to bolster narratives, people and groups that support Russian interests and undermine those that are counter to Russian interests. The maneuvers, which include dismissing and distorting information and undermining opinion leaders, are carried out in the press and on social media.

Russian intelligence operatives are skilled at using technology, including amplifying misinformation through fake accounts on popular social media platforms. In effect, Russia uses social and other online media like a military-grade fog machine that confuses the U.S. population and encourages mistrust in the strength and validity of the U.S. government.

This office building, dubbed the ‘troll factory,’ housed the Internet Research Agency, a Kremlin-backed disinformation organization.
AP Photo/Dmitri Lovetsky

Repressive governments like those in Russia and China have perfected the manipulation of online information as a way to control their own populations. Democracies are especially vulnerable to these techniques, given the open exchange of ideas and lack of centralized control over sources of information.

In addition, U.S. society is polarized, and that polarization is occurring at an increasing rate. A study by researchers at the University of Oxford examined Russia’s computational propaganda against the U.S. between 2013 and 2018 and found that it was designed to boost U.S. political polarization.

Plausible deniability

Though the Russian government commonly operates through its intelligence services, including the technical experts in the GRU military intelligence service and the spymasters in the FSB domestic intelligence service, it also uses criminal groups to achieve its aims.

History shows that Russia is most likely to recruit proxies to carry out cyberattacks that disrupt decision-making so that the attacks don’t point directly back to the Kremlin. There is no foggier battlefield than cyberspace. That is one of the main benefits of cyberspace as an element of national power – a cyberattack almost always allows for plausible deniability.

On Jan. 14, 2022, Russia arrested members of the Russian-based cyber gang REvil who were responsible for the 2021 ransomware attacks against meat supplier JBS Foods, headquartered in Greeley, Colorado, and the Colonial Pipeline, headquartered in Alpharetta, Georgia. The unusual move caused cybersecurity analysts to wonder about Russia’s motive, including speculation about making it easier for the government to deny a connection to the cyberattacks.

US cyber defenses

National cyber defense is inherently challenging, but the U.S. is far from defenseless. Several analysts have noted that the U.S. is the most capable cyber power in the world. The U.S. also has 20 years of experience dealing with Russian cyber aggression.

U.S. Army intelligence personnel in the Cyber Operations Center at Fort Gordon in Georgia watch for network attacks.
U.S. Army photo by Michael L. Lewis

The Biden administration’s tough stance on Russian hacking has made some progress. And though disinformation is among the murkiest of cyber strategies, cybersecurity experts are making headway on that front, too.

Cause for concern but no reason to fear

Cyber activity that creates room for Russia to present the seizure of Ukraine as a fait accompli is much more likely than a crippling cyberattack. Though Russia might temporarily deter a U.S. response to Russian moves in Ukraine by disrupting U.S. critical infrastructure, Americans are likely to present a unified and powerful response to such an overt attack. I believe Russia is more likely to prefer a path of insidious political polarization to weaken U.S. geopolitical influence.

Even if Russia were to launch extensive cyberattacks against the U.S., the average American is unlikely to be harmed. The disruption of natural gas and food supplies would clearly have a significant economic impact, but it is extremely rare for a cyberattack to lead to loss of life.

If you are worried about the situation in Ukraine and wondering what you can do to defend against Russian cyberattacks, I recommend tuning out divisive rhetoric and cultivating common ground with Americans whom you might not agree with. Though there are many issues U.S. society is working through, Americans can still try to find some general agreement in the principles of the American experiment.

[Science, politics, religion or just plain interesting articles: Check out The Conversation’s weekly newsletters.]