Cyber Resilience Under Fire: OT Systems and Critical Infrastructure in the Russia-Ukraine War
By: Csaba Krasznay
References
- Ahlers, C., Graham, M., & O’Meara, K. (2024). Impact of FrostyGoop ICS Malware on Connected OT Systems. Dragos – Intelligence Brief. Available at: https://hub.dragos.com/report/frostygoop-ics-malware-impacting-operational-technology.
- Assante, M.J., & Lee, R.M. (2021). The Industrial Control System Cyber Kill Chain. SANS Institute. Available at: https://sansorg.egnyte.com/dl/k7gJ2gVBj5.
- Beerman, J., Berent, D., Falter, Z., & Bhunia, S. (2023). A Review of Colonial Pipeline Ransomware Attack. 2023 IEEE/ACM 23rd International Symposium on Cluster, Cloud and Internet Computing Workshops (CCGridW), 8-15. Available at: https://doi.org/10.1109/CCGridW59191.2023.00017.
- Boschetti, N., Gordon, N.G., & Falco, G. (2022, October 24). Space Cybersecurity Lessons Learned from the ViaSat Cyberattack. ASCEND 2022. Available at: https://doi.org/10.2514/6.2022-4380.
- Dos Santos, D., Molige, S. & Amine, A. (2024, October 22). ICS Threats: Malware Targeting OT? It’s More Common Than You Think. Forescout Research - Vedere Labs. Available at: https://www.forescout.com/blog/targeting-ot-security-ics-threats-malware/.
- Dragos, Inc. (2026). 9th Annual Year in Review | Ot/Ics Cybersecurity Report. Dragos, Inc. Available at: https://www.dragos.com/blog/dragos-2026-ot-cybersecurity-year-in-review.
- Dziwisz, D., & Sajduk, B. (2023). The Russia-Ukraine Conflict from 2014 to 2023 and the Significance of a Strategic Victory in Cyberspace. Applied Cybersecurity & Internet Governance, 2(1). Available at: https://doi.org/10.60097/ACIG/162842.
- ENISA. (2025). ENISA Threat Landscape 2025. Available at: https://www.enisa.europa.eu/sites/default/files/2026-01/ENISA%20Threat%20Landscape%202025_v1.2.pdf.
- European Union. (2022a). Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive). Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555.
- European Union. (2022b). Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011. Available at: https://eur-lex.europa.eu/eli/reg/2022/2554/oj.
- Gisel, L., Rodenhäuser, T., & Dörmann, K. (2020). Twenty years on: International humanitarian law and the protection of civilians against the effects of cyber operations during armed conflicts. International Review of the Red Cross, 102(913), 287-334. Available at: https://doi.org/10.1017/S1816383120000387.
- INCIBE. (2024, September 26). Fuxnet: The malware that paralyzed ICS systems | INCIBE-CERT | INCIBE. Available at: https://www.incibe.es/en/incibecert/blog/fuxnet-malware-paralyzed-ics-systems.
- Jolly, J., & Milmo, D. (2025, September 20). Inside the Jaguar Land Rover hack: Stalled smart factories, outsourced cybersecurity and supply chain woes. The Guardian. Available at: https://www.theguardian.com/business/2025/sep/20/jaguar-land-rover-hack-factories-cybersecurity-jlr.
- Kostyuk, N., & Gartzke, E. (2022). Why Cyber Dogs Have Yet to Bark Loudly in Russia’s Invasion of Ukraine. Texas National Security Review, 5(3), 113–126. Available at: https://doi.org/10.26153/tsw/42073.
- Kostyuk, N., & Zhukov, Y.M. (2019). Invisible Digital Front: Can Cyber Attacks Shape Battlefield Events? Journal of Conflict Resolution, 63(2), 317-347. Available at: https://doi.org/10.1177/0022002717737138.
- Kovács, L., & Krasznay, C. (2024). Digitális Mohács 3.0. Hadtudomány, 34(3), 40-55. Available at: https://doi.org/10.17047/HADTUD.2024.34.3.40
- Przetacznik, J., & Tarpova, S. (2022). Russia’s war on Ukraine: Timeline of cyber-attacks. European Parliament. Available at: https://www.europarl.europa.eu/RegData/etudes/BRIE/2022/733549/EPRS_BRI(2022)733549_EN.pdf.
- Purchase, E., & Caldwell, F. (2004). Digital Pearl Harbor: A Case Study in Industry Vulnerability to Cyber Attack. In S. Ghosh, M. Malek, & E. A. Stohr (Eds), Guarding Your Business (pp. 47-64). Kluwer Academic Publishers. Available at: https://doi.org/10.1007/0-306-48638-5_4.
- Salazar, L., Castro, S.R., Lozano, J., Koneru, K., Zambon, E., Huang, B., Baldick, R., Krotofil, M., Rojas, A., & Cardenas, A.A. (2024). A Tale of Two Industroyers: It was the Season of Darkness. 2024 IEEE Symposium on Security and Privacy (SP), 312-330. Available at: https://doi.org/10.1109/SP54263.2024.00162.
- Schmitt, M.N. (Ed.). (2017). Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations (2nd edn). Cambridge University Press. Available at: https://doi.org/10.1017/9781316822524.
- Selján, G. (2020). The Remarkable 10th Anniversary of Stuxnet: Analytical Summary of the SolarStorm Cyber Espionage Campaign. Academic and Applied Research in Military and Public Management Science, 19(3), 85-98. Available at: https://doi.org/10.32565/aarms.2020.3.6.
- Sherman, J. (2025). Confronting Russia’s Cyber Power: Reassessing assumptions, sizing up the threat, and building a proactive response. Atlantic Council. Available at: https://www.atlanticcouncil.org/wp-content/uploads/2025/05/Confronting-Russias-Cyber-Power.pdf.
- Stouffer, K., et al. (2023). Guide to Operational Technology (OT) security (NIST SP 800-82r3; p. NIST SP 800-82r3). National Institute of Standards and Technology (U.S.). Available at: https://doi.org/10.6028/NIST.SP.800-82r3.
- Trachtenberg, M. (2024). Operation Farewell and the Siberian Pipeline Explosion: A Research Note. H-Diplo | Robert Jervis International Security Studies Forum, Commentary III-2, 7-20.
- Willett, M. (2022). The Cyber Dimension of the Russia–Ukraine War. Survival, 64(5), 7-26. Available at: https://doi.org/10.1080/00396338.2022.2126193.
DOI: https://doi.org/10.2478/raft-2026-0028 | Journal eISSN: 3100-5071 (formerly 2247-840X) | Journal ISSN: 3100-5063
Language: English
Page range: 361 - 376
Submitted on: May 27, 2026
Accepted on: Aug 21, 2026
Published on: Sep 16, 2026
Published by: Nicolae Balcescu Land Forces Academy
In partnership with: Paradigm Publishing Services
Keywords:
Related subjects:
© 2026 Csaba Krasznay, published by Nicolae Balcescu Land Forces Academy
This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 License.