ANALYSIS OF CYBER ATTACKS AND THE ACTIVITIES OF APT GROUPS IN UKRAINE

The article is devoted to the analysis of cyberattacks and the activities of the APT (Advanced Persistent Threat) group in Ukraine, which significantly intensified the trend of the last decade in the context of the growing globalization of information warfare and political conflicts. The paper takes an in-depth look at the methods, tactics, and procedures (TTP) used by known APT groups such as Sandworm, Fancy Bear (APT28), and Gamaredon to carry out targeted cyber-attacks against Ukraine. The main focus of the article is the identification of patterns in the activities of APT groups and the formation of recommendations for the development of effective cyber protection strategies. The work uses data from open sources, CERT-UA reports, and analytical materials of international companies to assess the current state of cyber security and identify existing vulnerabilities that can be used by attackers. The article details various cyber-attack techniques that include the use of polymorphic and metamorphic malware, supply chain attacks, and methods, tactics, and procedures according to the Mitre framework. Considerable attention is paid to strategies for protection against APT attacks, wi