Defending Ukraine from Russian cyber attacks was ‘hand-to-hand combat’: Mandiant exec.

Russia launched a staggering number of destructive cyber attacks against Ukraine in the early days and weeks of its full-scale offensive that required digital security defenders to engage in “hand-to-hand combat in the cyber domain,” Sandra Joyce, the executive vice president of global intelligence at Mandiant, said at Semafor’s Securing the Digital Future event.

“From a cyber defender’s perspective, it was a dramatic back and forth,” Joyce said on Tuesday. “It was a harrowing first days, weeks and months.”

She said that Russia used more wipers — destructive malware that if successfully deployed destroys user data — against Ukraine in the first four months of the war than Mandiant saw in the past eight years while supporting Ukraine’s digital defenses.

But Russia’s tactics shifted, she said, when it became clear that Moscow would not succeed in quickly toppling Kyiv. Joyce said Russia’s initial destructive tactics — which included targeting a civilian missile alert system — seemed designed to support a quick invasion. More than a year and a half since the large-scale invasion began, Ukraine is pressing forward with its counteroffensive.

“I always am surprised to hear that people think the cyber thing didn’t happen because it certainly happened,” Joyce said. “[The Russians] weren’t successful in their ultimate aim, but they did show a tremendous capability when it comes to destructive attacks.”