Smoke, Mirrors, and Self-Attribution: Ukraine’s Military Intelligence Service in Cyberspace

This article examines the unprecedented shift towards public self-attribution of cyber operations by Ukraine's military intelligence service, GURMO, from November 2023 to February 2024. Breaking away from the norm of state actors' secrecy, GURMO openly claimed responsibility for cyberattacks against Russian targets, a stark contrast to previous practices where such actions were neither confirmed nor denied. Through the analysis of eight news items, the study explores the motivations, credibility, and effectiveness of GURMO's claims, including the acknowledgment of operations by pro-Ukrainian hacktivist groups. The investigation raises questions about the strategic implications of this approach, its impact on public and enemy perceptions, and the role of media in disseminating these claims. This shift indicates a new dimension in cyber warfare, where self-attribution serves as a tool for psychological and informational impact, marking a significant evolution in the conduct of cyber operations.