Cyber Berkut
origin (suspected)
Russiaattribution confidence: medium (50)
source: misp-galaxy1 refs →
Cyber Berkut· Russia
Cyber Berkut is a Russia-originating hacktivist group known for defacement and DDoS attacks against Ukrainian and NATO targets.
Analyst brief
Cyber Berkut is a Russia-originating, likely hacktivist group. It primarily targets Ukrainian government entities, media outlets, and organizations in NATO member countries. Their main TTPs involve defacement attacks, DDoS operations, and website content manipulation. Defenders should focus on web application security, monitoring for traffic anomalies, and having recovery plans for public-facing systems.
unknown
FAQ2
What attack methods does the Cyber Berkut group primarily use?
The main TTPs of the Cyber Berkut group involve defacement attacks, DDoS operations, and website content manipulation.
Which entities are among the targets of the Cyber Berkut group?
Cyber Berkut primarily targets Ukrainian government entities, media outlets, and organizations in NATO member countries.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.