Threat actor nation
Russia
103 scored AI-enabled operations attributed to Russia
Overview
Written by the AIRE team.
Primary Threat Groups:
Strategic Objectives:
- Military advantage. Support operations related to conventional military engagements, especially in Ukraine, as well as cyberwarfare (e.g., enhance malware sophistication, persistence, and evasion).
- Cybercrime. Filter, analyze, and share stolen data across financially motivated and state-backed actors.
- Intelligence collection. Gather strategic, tactical, and operational data on foreign governments, military targets, and critical infrastructure.
AI capabilities
Click a capability to filter the operations.
Artifact Development27
Reconnaissance16
Intrusion, Evasion & Persistence15
Attack Orchestration14
Social Engineering10
202420252026
Most active actors
Click an actor to see its operations.
Sophistication by quarter
Each dot is one operation attributed to Russia; the dashed line follows the 90th percentile. Click a dot to see the incident.
Operations
37 in total, highest sophistication first.
Next profile
North Korea · 34 operations
Only scored operations appear on this page; sub-incidents are counted under their parent campaign. Scores are from the run of 30 Oct 2026.