An in-depth look at Russia's offensive cyber capabilities, their potential use in Ukraine, the limitations of cyber power, and implications for the West
Context & Ripple Effects
Lawfare's assessment ran two days before the invasion, cataloguing an offensive apparatus that had been building for years — the same campaign tied to earlier attacks on the Polish stock exchange and a German steel plant — while arguing that cyber power has hard strategic limits.
What followed split the difference: weeks in, Foreign Affairs rated cyberattacks on government, military, logistics, and critical infrastructure as Russia's biggest military success of the war so far, yet a quiet partnership between US tech companies, NATO intelligence agencies, and Ukrainian hackers kept the offensive from proving decisive — precisely the constraint this analysis flagged.
First-order effects
- For Ukraine and NATO planners, the piece lands as a pre-war targeting preview: Russia's espionage-grade footholds in government, military, logistics, and infrastructure networks make those systems the first targets once hostilities begin.
- It also hands Western policymakers a caution rooted in the analysis itself — cyber operations complement but cannot substitute for kinetic force, tempering any expectation that digital retaliation alone could deter the invasion.
Second-order effects
- Once the invasion confirms the threat, the old restraint against hacking Russian targets dissolves and the country is hit by an unprecedented wave of retaliatory cyberattacks, ending its prior off-limits status.
- US tech companies, NATO intelligence agencies, and Ukrainian hackers form a defensive partnership that blunts Russia's offensive capabilities, turning private-sector visibility into a military asset mid-conflict.
Third-order effects
- A year in, Ukraine and its allies mount an unprecedented cyberdefense against Russian wiper malware even as observers credit Moscow's cyber campaign as its best-performing military effort — evidence that offensive cyber power excels at disruption but cannot decide wars.
- If the pattern holds, wartime cyber conflict structurally favors federated defense — states, companies, and volunteer hackers sharing telemetry in real time — and the pre-war assumption that offensive cyber dominance converts into strategic leverage weakens across Western planning.
The trend: Great-power cyber conflict is shifting from covert, deniable espionage campaigns toward open wartime operations whose effectiveness depends less on offensive capability than on how quickly defenders federate.