{"id":50643,"date":"2023-02-16T09:00:00","date_gmt":"2023-02-16T09:00:00","guid":{"rendered":"http:\/\/0cd91b54-7490-49c3-8c38-8d7fb83ea2ec"},"modified":"2023-02-16T09:00:00","modified_gmt":"2023-02-16T09:00:00","slug":"the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/","title":{"rendered":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says"},"content":{"rendered":"
\n
\n
\"Flag<\/picture><\/div>\n

<\/div>\n

Image: Getty Images<\/span><\/figcaption><\/figure>\n

One year after Russia invaded Ukraine, the war continues — including an ever-evolving digital component that has implications for the future of cybersecurity around the world. Among other things, the war in Ukraine has upended the Eastern European cyber-criminal ecosystem, according to cybersecurity experts from Google, shaking up the way ransomware attacks<\/a> are playing out. <\/p>\n

“Ransomware continues to be lucrative, but financially motivated threat actors are not immune from geopolitical developments,” says a new report, compiled by Google’s Threat Analysis Group (TAG), Mandiant (the cybersecurity firm that’s now a part of Google Cloud), and Google Trust & Safety. <\/p>\n

Also:<\/strong> Russian hackers’ lack of success against Ukraine shows that strong cyber defenses work<\/strong><\/a><\/p>\n

“Lines are blurring between financially motivated and government-backed attackers in Eastern Europe,” the report says, “with threat actors changing their targeting to align with regional geopolitical interests, and government-backed attackers adopting some tactics and services associated with financially motivated actors.” <\/p>\n

As alliances change, it’s no longer taboo for cybercriminals to go after Russian targets, the report notes. Meanwhile, the war has also accelerated a trend towards “specialization” in the ransomware ecosystem, Google’s experts say, making it more difficult to pin down guilty parties. <\/p>\n

On top of all that, the report notes that “the war in Ukraine has also been defined by what we expected\u2009 — but didn’t see.” Specifically, there was no surge in attacks against critical infrastructure, which is surprising given the commonality of ransomware threats. <\/p>\n

Political splits<\/h2>\n

The war has splintered the Eastern European cybercriminal network, Google’s report says. Some groups have declared political allegiances, while others have worked along geopolitical lines and other prominent ransomware groups have shut down. <\/p>\n

For instance, at the start of the war, the ransomware group Conti declared its support for Russia and threatened to strike the critical infrastructure of nations that took action against Russia. That stance led to divisions within the group, according to leaks of its internal communications and source code, Google says. Rather than ramping up attacks as it threatened, the group shut down. <\/p>\n

Additionally, the stealer malware Raccoon suspended activity after its suspected developer fled the invasion of Ukraine. He was arrested in the Netherlands and is waiting to be extradited to the US. <\/p>\n

Also: <\/strong>What AI chatbots mean for the future of cybersecurity<\/strong><\/a><\/p>\n

The war has also emboldened cybercriminals to go after Russian targets. <\/p>\n

“Before February 2022, ransomware creators used techniques to avoid targeting the Commonwealth of Independent States, including hard-coding country names and checking the system language,” the report says. “After the invasion, hacktivist group NB65 used leaked Conti source code to target Russian organizations. NB65 claims links to the Anonymous hacktivist collective, which conducted an ‘#OpRussia’ campaign, including several hack-and-leak operations against Russian organizations such as the Russian Central Bank.”<\/p>\n

Meanwhile, the so-called “Ukrainian IT Army” has collaborated with Ukraine’s defense ministry to defend Ukraine and to target Russian infrastructure and websites. <\/p>\n

Changing tactics <\/h2>\n

The war has also prompted a shift in tactics among ransomware groups. First, ransomware campaigns associated with government-backed attackers are using tactics typically associated with financially motivated hackers — and vice versa. <\/p>\n

Additionally, ransomware attackers are increasingly specializing in one part of the “attack chain,” the report says, while working with other “business partners”. <\/p>\n

During the war, attackers have also experimented more with novel techniques, such as new delivery channels and unconventional file formats. Financially motivated attackers have also been quick to borrow other criminals’ successful techniques, which makes it harder to determine who’s behind attacks. <\/p>\n

Retaliation unrealized<\/h2>\n

Google’s report considers reasons why there wasn’t an uptick in ransomware attacks against critical infrastructure during the war, “as might have been expected after declarations early in the conflict and the prior wave of such attacks in 2021.”<\/p>\n

One theory Google puts forward is that the US response to the 2021 Colonial Pipeline attack<\/a>, and the subsequent arrest in Russia of members of the REvil ransomware gang, may have deterred financially motivated ransomware gangs.<\/p>\n

Google also postulates that sanctions against Russia might have impacted Western organizations’ willingness to pay ransoms. <\/p>\n

Also:<\/strong> The best VPN services<\/strong><\/a><\/p>\n

Along with the disruption of the Eastern European criminal ecosystem, the report analyzes two other aspects of the digital warfront. First, it notes that: “Russian government-backed attackers have engaged in an aggressive, multi-pronged effort to gain a decisive wartime advantage in cyberspace, often with mixed results.” <\/p>\n

In 2022, Russia increased targeting of users in Ukraine by 250% compared to 2020, while targeting of users in NATO countries increased over 300%.<\/p>\n

The report also analyzes Russia’s robust use of “information operations,” which includes everything from overt state-backed media to covert platforms and accounts,\u2009to shape public perception of the war. <\/p>\n

All told, the report concludes: “It is clear cyber will now play an integral role in future armed conflict, supplementing traditional forms of warfare.” <\/p>\n

The report, its authors said, aims to serve “as a call to action as we prepare for potential future conflicts around the world.”<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Ransomware continues to be lucrative, but financially motivated threat actors are not immune from geopolitical developments, Google’s new report says, one year into the war in Ukraine.
\nREAD MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-50643","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"\nThe war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-02-16T09:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says\",\"datePublished\":\"2023-02-16T09:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/\"},\"wordCount\":859,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/ac42f638708e56dcbfa80e9838d941c653401a9d\\\/2023\\\/02\\\/16\\\/58be5cec-4bbe-4fdb-834b-d34d98059692\\\/gettyimages-1334886784.jpg?auto=webp&width=1280\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/\",\"name\":\"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/ac42f638708e56dcbfa80e9838d941c653401a9d\\\/2023\\\/02\\\/16\\\/58be5cec-4bbe-4fdb-834b-d34d98059692\\\/gettyimages-1334886784.jpg?auto=webp&width=1280\",\"datePublished\":\"2023-02-16T09:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/ac42f638708e56dcbfa80e9838d941c653401a9d\\\/2023\\\/02\\\/16\\\/58be5cec-4bbe-4fdb-834b-d34d98059692\\\/gettyimages-1334886784.jpg?auto=webp&width=1280\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/ac42f638708e56dcbfa80e9838d941c653401a9d\\\/2023\\\/02\\\/16\\\/58be5cec-4bbe-4fdb-834b-d34d98059692\\\/gettyimages-1334886784.jpg?auto=webp&width=1280\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/","og_locale":"en_US","og_type":"article","og_title":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-02-16T09:00:00+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says","datePublished":"2023-02-16T09:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/"},"wordCount":859,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/","url":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/","name":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280","datePublished":"2023-02-16T09:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/ac42f638708e56dcbfa80e9838d941c653401a9d\/2023\/02\/16\/58be5cec-4bbe-4fdb-834b-d34d98059692\/gettyimages-1334886784.jpg?auto=webp&width=1280"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/the-war-in-ukraine-has-shaken-up-the-cybercriminal-ecosystem-google-says\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"The war in Ukraine has shaken up the cybercriminal ecosystem, Google says"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50643","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=50643"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/50643\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=50643"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=50643"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=50643"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}