Government warns of looming Russian cyberattack threat

Country is waging ‘a hidden war’

A senior UK minister has warned about the looming threat of Russian cyberattacks, saying Moscow could exploit its expanding cyber capabilities to strike critical infrastructure and businesses in the UK and other NATO member states.

Pat McFadden, Chancellor of the Duchy of Lancaster, is set to speak at the NATO Cyber Defence Conference at Lancaster House this week, where he is expected to outline Russia's aggressive cyber strategies and its readiness to deploy them against NATO allies.

McFadden will say that Russia has already targeted critical infrastructure in the UK, including the energy sector. He is also expected to warn that Moscow is prepared to intensify these attacks, potentially expanding its focus to businesses across the country.

"With a cyberattack, Russia can turn the lights off for millions of people. It can shut down the power grids," he will say in the speech, first reported by The Sunday Telegraph.

"Be in no doubt: the United Kingdom and others in this room are watching Russia. We know exactly what they are doing, and we are countering their attacks both publicly and behind the scenes."

McFadden will also address the role of pro-Kremlin cyber gangs and unofficial hacktivists, which operate with impunity as long as they align with Moscow's interests. Such groups, often not directly affiliated with the Russian government, amplify the risk of unintended escalation.

McFadden is expected to specifically name Unit 29155, a Russian military unit previously implicated in cyberattacks across Europe, as a key actor.

His speech is anticipated to boost international efforts to combat Russian cyber aggression. NATO allies are expected to explore strategies to reinforce their collective cyber defences and implement measures to deter future attacks.

NATO’s collective defence measure, Article 5, does not officially apply to cyberattacks. However, a cyberattack against a member state could be used to trigger the Article in certain special circumstances, as per a communiqué issued in 2021.

The UK government has been increasingly concerned about Russia's cyber capabilities, particularly in light of the ongoing conflict in Ukraine. Officials believe that Moscow may use cyberattacks as a tool to disrupt Western economies and sow discord.

Liz Kendall, the Work and Pensions Secretary, shared her own concerns on the issue over the weekend. She said Russia is waging a "hidden cyber war" alongside its conventional military operations.

Speaking on Sky News' Sunday Morning with Trevor Phillips, Kendall urged businesses and individuals to remain vigilant and take steps to protect themselves from cyber threats.

"We have to be absolutely vigilant in that as a government, but also in businesses and wider society, to protect against those cyber hacktivists."

The warnings come weeks after several UK councils fell victim to cyberattacks, some claimed by pro-Russian hacking groups.

Last month, NoName057(16) said it was responsible for a series of cyberattacks targeting several councils in Greater Manchester.

The group, which has been linked to previous attacks on Ukrainian infrastructure, employed a DDoS attack to overwhelm the websites of Salford, Bury, Trafford and Tameside councils.

The National Cyber Security Centre (NCSC) said it was aware of the attacks.

In June, a Russian cybercrime group carried out a cyberattack disrupting vital services at major hospitals in London.

The attack targeted pathology services firm Synnovis, causing a "severe reduction in capacity" – forcing hospitals to cancel operations, tests and blood transfusions.

Ciaran Martin, former chief executive of the NCSC, identified the attackers as the group Qilin, which is known to operate freely from within Russia.