Ukraine's IT Army is a 'World First' in Cyberwarfare — But It's a Major Gamble for the Government, Experts Say
In the wake of Russia's full-scale invasion of Ukraine, the Ukrainian government made a bold move by calling upon tech-savvy individuals worldwide to join the fight against the aggressor. This initiative led to the formation of Ukraine's IT army, a unique and unprecedented approach to cyberwarfare that has garnered both attention and concern from experts.
The Formation of the IT Army
Shortly after the invasion began, Mykhailo Fedorov, Ukraine's then-deputy prime minister, took to social media platform X to rally digital talents. "We are creating an IT army. We need digital talents," he proclaimed, igniting a wave of enthusiasm among tech enthusiasts globally. Within a month, the IT army's Telegram channel boasted around 300,000 subscribers, reflecting the eagerness of volunteers to contribute to Ukraine's defense.
As the group expanded, so did its activities. By late May, the IT army had reportedly launched approximately 2,000 cyberattacks on Russian organizations, according to Ukraine's Digital Transformation Ministry. A spokesperson for the group, known as Ted, indicated that the number of active devices involved in these attacks was growing, despite a decline in Telegram channel subscribers.
The Mechanics of Cyberwarfare
The IT army operates with a level of organization that is both impressive and concerning. The group's website offers resources in both Ukrainian and English, providing guides on how to install the "IT Army Kit," which contains tools for conducting cyberattacks. Volunteers can set up these attacks to run in the background, allowing them to maintain their daily routines while contributing to the cyber offensive.
Experts note that Russian organizations are particularly vulnerable to cyberattacks, especially Distributed Denial-of-Service (DDoS) attacks. Alan Woodward, a professor at the Surrey Centre for Cyber Security, highlighted that while Russia has the expertise to defend against such attacks, it lacks the service providers necessary to effectively mitigate them. This vulnerability was evident when the IT army launched significant DDoS attacks against major Russian banks and payment systems.
The Impact of Cyberattacks
The IT army's efforts have not only targeted financial institutions but also Russian media outlets. In June 2023, hackers disrupted state TV broadcasts, delivering a powerful message in Ukrainian. These cyberattacks play a crucial role in Ukraine's overall cyber defense strategy, as they create persistent disruptions for specific Russian businesses and platforms.
Experts like Stefan Soesanto from the Center for Security Studies at ETH Zurich emphasize the importance of these attacks in supporting Ukraine's military efforts. They can counter misinformation and create a symbolic image of vulnerability for the Russian side, potentially boosting the morale of Ukrainian troops and citizens.
Risks and Concerns
Despite the successes, the IT army's approach raises significant concerns. Experts warn that placing such responsibility in civilian hands can lead to unintended consequences. There are fears that volunteers may not always follow instructions, potentially launching attacks that could affect innocent parties across different countries.
Moreover, the relationship between the IT army and the Ukrainian government remains ambiguous. While some experts believe that the group has been co-opted by Ukrainian intelligence and the Ministry of Defense, Ted insists that the IT army operates independently, albeit with some level of collaboration to synchronize efforts.
The Ukrainian government may prefer to maintain a degree of distance from the IT army to ensure plausible deniability in case of any fallout from their actions. This strategy is crucial, as the legal implications of civilian participation in cyberwarfare are still largely uncharted territory.
A Precedent for Future Conflicts
The IT army represents a groundbreaking development in the realm of cyberwarfare. It is the first instance of a government explicitly calling for civilian participation in cyber operations, setting a precedent for future conflicts as cyber warfare becomes increasingly prevalent.
As the situation evolves, the world watches closely. The IT army's unique approach may redefine the landscape of modern warfare, but it also serves as a reminder of the complexities and risks associated with blending civilian efforts into military strategies. The gamble taken by the Ukrainian government could have far-reaching implications, not only for Ukraine but for the future of cyber warfare globally.