Ukraine Ranks Third Globally in Cyber Threats with 4.8% of Attacks in First Half of 2026

Cyber Threat Landscape in Ukraine During 2026

According to Рубрика — Суспільство: According to the Microsoft Digital Defense Report, Ukraine accounted for 4.8% of global cyberattacks in the first half of 2026, placing it third worldwide. This marks a rise from its fifth-place standing in 2025. Only the United States and Israel recorded a higher share of cyber threats. Notably, Ukraine remains a primary target of Russian cyber operations, representing 14% of Russia’s cyber activity.

Key Targets of Cyberattacks

The main sectors targeted by cyberattacks in Ukraine include:

• government agencies (27%)
• information technology (17%)
• research and academic institutions (14%)

These figures highlight the significant risks faced by Ukraine’s critical infrastructure, underscoring the urgent need to strengthen cybersecurity defenses.

Additionally, CERT-UA uncovered a large-scale malware campaign linked to the threat actor cluster UAC-0277. Attackers employ a technique known as ClickFix, which involves injecting fake security verification pages into legitimate but compromised websites. In September 2026 alone, CERT-UA detected over 100 hacked sites containing malicious JavaScript code.

Artificial intelligence is dramatically reshaping the cyber threat environment by accelerating attack timelines and scaling up operations. Microsoft emphasizes that

“AI is transforming cybersecurity itself, reducing the time, expertise, and resources required to identify and exploit vulnerabilities, while enabling both attackers and defenders to operate faster, on a larger scale, and with greater autonomy.”

Moreover, attackers are increasingly abandoning custom malware in favor of abusing legitimate tools, cloud platforms, and administrative functions. This shift complicates detection efforts, as malicious actions often mimic normal user behavior. These trends highlight the continuous need for enhanced security strategies to defend Ukraine’s digital assets.

The current cyber threat situation in Ukraine not only reflects growing adversary activity but also stresses the critical importance of bolstering the nation’s cybersecurity framework. The surge in attacks against vital institutions calls for a comprehensive approach to protecting information systems. Given AI’s expanding role in cyber threats, Ukraine must integrate advanced technologies into its defenses to effectively address evolving challenges in cybersecurity.

As the cyber threat landscape continues to evolve, recent findings from CERT-UA reveal that over 100 websites have been compromised through deceptive tactics, such as fake verification checks. This alarming trend underscores the urgent need for enhanced cybersecurity measures, particularly in light of Ukraine's significant role in global cyber threats.