Enemy on your phone: how Ukrainians’ digital habits are fueling Russian hybrid threats

Security
29 January 2026, 19:42

The Russian war against Ukraine, now in its 11th year, has long moved beyond the battlefield. Moscow has waged its campaign across multiple fronts — from information and cyberspace to the routines of everyday life. This confrontation didn’t start in 2014. From the moment Ukraine regained independence, Russia was already applying pressure through a range of aggressive measures. Over time, these efforts grew more intense, evolving alongside shifts in technology, politics, and social dynamics. Between 2014 and 24 February 2022 — the start of the full-scale conventional invasion — politicians and analysts increasingly labelled Russia’s actions as hybrid warfare. Since the launch of the full-scale invasion, those hybrid threats have continued, posing serious risks not just to Ukraine but also to Western societies supporting Kyiv.


What exactly is hybrid war, and how is the Kremlin waging it?

Hybrid war is more than a blend of military and non-military tools. It is a systematic strategy designed to undermine statehood, fracture social cohesion, and erode public trust in institutions. Russia deploys a wide range of such instruments — from disinformation campaigns and cyberattacks to energy leverage, economic pressure, and efforts to shape politics through pro-Russian networks and information channels. The aim is to cause damage without open combat, deliberately blurring the line between war and peace.

At the core of this approach lies information warfare. It seeks to manipulate public opinion, weaken confidence in authorities, and spread fear or apathy. Russian state media, fake accounts and social media bots help construct an alternative “reality” in which Ukraine is cast as a failed state and the West as an exhausted ally. These narratives are intended to demoralise Ukrainians, fuel internal divisions, reduce support among partners, and sap belief in eventual victory.

Cyberspace is another high-risk front. Since the full-scale invasion began, Ukraine has faced thousands of attacks targeting government systems, banks, energy companies, media outlets, and even hospitals. These strikes are often paired with information campaigns that magnify their impact, spreading false reports of “hacked” state databases or alleged personal data leaks.

“The cyber threat to Ukraine is high and constant. The combination of attacks on state institutions with other forms of cyber aggression makes cyberspace one of the front lines of the war. These operations aim to destroy infrastructure, gather intelligence, exert psychological pressure on the population, and create opportunities for information manipulation,” said Nadiia Balovsiak, PhD, associate professor at the UCU School of Journalism and Communication and an expert on media literacy, digital security, and information warfare, in comments to The Ukrainian Week.

Cyber defence is therefore not just a technical challenge — it is a critical element of national security. Ukraine’s resilience depends on coordinated efforts by the state, specialists, and citizens acting responsibly online.

Research shows Ukrainians are feeling Russia’s hybrid threats firsthand. A survey by the Rating Sociological Group for the EU Advisory Mission (31 July–5 August 2025) found that most citizens are not only aware of these threats but see them as real and growing. The vast majority also recognise the scale and seriousness of Russia’s hybrid aggression.

The survey found that 81% of respondents believe hybrid threats from Russia are intensifying, while just 13% think they are weakening, reflecting a high level of public concern. When asked to rate the overall threat, 69% described it as high and 26% as medium. Only 3% considered the threat low or insignificant. These results underline that Ukrainians no longer see hybrid warfare as abstract or hypothetical — they view it as a constant, tangible challenge.

When it comes to Ukraine’s ability to counter these threats, opinions are split. Some 67% of respondents believe the state is moderately prepared, 14% say it is well prepared, while 16% feel the country is completely unready to respond effectively. Russia’s high-profile cyberattacks in recent years clearly shape these perceptions. In December 2024, an attack on the state registers of Ukraine’s Ministry of Justice left them offline for more than two weeks. A year earlier, a cyberattack on the telecom operator Kyivstar cut mobile communications across the country for a full day. At the same time, a cyber operation by Ukraine’s Defence Intelligence (HUR) in September 2025 paralysed Russia’s Central Election Commission — a type of strike that, conversely, boosts confidence in Ukraine’s ability to hit back.

One of the main tools of information warfare at the societal level is Telegram. For several years, this messaging app has been the primary source of news for Ukrainians. A study by the Rating group found that as of April 2025, more than half of respondents used Telegram to follow events in the country either daily or several times a week.

Despite repeated complaints and promises to restrict the app, Ukrainians keep choosing it over the many alternatives. Its draw is clear: convenience, fast messaging, countless thematic channels, and the option of anonymity. That very anonymity has also made Telegram a major vector for disinformation, manipulation, and propaganda, making safe use an increasingly urgent concern.

Telegram has also become a key channel for communication between the Ukrainian authorities and the public. Government bodies at all levels run their own channels, often posting information faster than on official websites. While some state and private organisations have moved to more secure messengers, like WhatsApp, Telegram remains the main way to reach the wider population.

This way, Russia’s hybrid war against Ukraine isn’t just a temporary threat — it’s a long-term strategy that requires a coordinated, all-around response. Success isn’t measured by weapons alone; it’s about awareness. Ukrainian society needs to stay united, think critically, trust the state, and recognise that the fight isn’t only on the battlefield — it’s in every news story, every click, every post.

How can Ukraine counter hybrid attacks

“Media literacy, independent journalism, resilient infrastructure, and honest communication from authorities,” says Nadiia Balovsiak, noting that “hybrid threats can take many forms, so resilience looks different in each case.” For Ukraine, building a comprehensive system to counter these threats has become a strategic priority.

Analysts have long observed that Ukrainian society is “maturing” on multiple levels. At the same time, the tactics of the aggressor are evolving. The concept of hybrid warfare, Balovsiak explains, “has grown from relatively predictable multi-vector tools in 2014 into a more integrated, large-scale, and technology-driven model after 2022. This includes the systematic use of social media, messengers, and anonymous channels, the deployment of artificial intelligence and bot farms, and the exploitation of internal divisions to destabilise society.” As a result, strategies for resistance must constantly adapt and improve.

Cooperation between the state and civil society is a crucial factor for success. Active engagement from citizens, independent media, and experts in shaping Ukraine’s information policy not only makes it more effective but also helps prevent official communication from being used as a tool of propaganda. Ukraine’s experience shows that real strength in resistance comes from a society that is informed, united, and able to think critically.

This is Articte sidebar