Recorded Future analyzed the pro-Russian hacker group Joker DPR that has gained prominence during Russia's ongoing invasion of Ukraine. It is usually known for cyberattacks targeting sensitive information from Ukrainian military and government websites, as well as spreading pro-Russian propaganda on social media.
What do we know about Joker DPR?
Joker DPR has crafted a sophisticated persona, portraying itself as an individual in its communications.
However, evidence suggests that it is likely a threat group that depends on a coordinated network of pro-Russian sympathizers in Ukraine and like-minded actors to collect and publish sensitive information.
Its most notable claim so far has been an alleged breach of DELTA, a Ukrainian battlefield management system used for national defense. However, it is unlikely that the breach was as extensive as Joker DPR has claimed.
Why this matters
Its activities appear to align with Russian influence operations in Ukraine, aimed at undermining support for the Armed Forces of Ukraine (AFU) and the Ukrainian government. This suggests that the group may be amplifying Russian information operations in Ukraine, possibly with coordination from the Russian state.
Russia's potential utilization of Joker DPR to advance its objectives in Ukraine is consistent with its current strategic approach, commonly referred to as "hybrid warfare" or the "Gerasimov Doctrine".
This doctrine prioritizes cyber and influence operations over traditional kinetic operations, enabling Russia to achieve goals that may have been unattainable through conventional means.
Alignment with other Russian gangs
Joker DPR's claims of collaboration with other pro-Russian hacktivist groups, including Beregini, Sprut, Limma, and Killnet, imply possible coordination with the Russian state.
Beregini has previously supported Russia's influence operations, while Killnet has expressed its intent to coordinate with the Russian government.
The bottom line
Researchers surmise that Joker DPR will continue engaging in propaganda and cyberespionage operations that ultimately threaten Ukrainian national security. With a huge following on its Telegram channel and as its infrastructure and audience grow, Joker DPR may gain the heightened capability to undermine Ukraine’s war effort.