Continuation of the Russo-Ukrainian War: Armed Aggression in the Donbas (2014–2015)

The expansion of Russian aggression through the seizure of administrative buildings in eastern Ukraine by armed detachments of Russian militants (I. Strelkov's group) in order to create the puppet "DNR" and "LNR". The campaign was accompanied by terror against the local population, the downing of flight MH17, and massive disinformation. In the summer of 2014, the Russian Federation brought in regular troops, which led to the battles near Ilovaisk and Debaltseve[1][2].

ID: C0101
Start:  April 2014
End:  February 2015
Version: 1.0
Created: 27 April 2026
Last Modified: 27 April 2026

Actors

ID Name Description
G0011 Russian Federation

Seizure of Sloviansk by the armed group of I. Strelkov and the formation of the separatist DPR/LPR under the supervision of Russian political technologists (A. Borodai) to destabilize the region from within[1].

Techniques Used

ID Name Use
T0053 Abduction of People

Mass unlawful detentions and abductions of civilians: "people who take to the streets with Ukrainian flags are persecuted and detained"[1].

T0005 Aggressor Claiming Victim Status

Large-scale exploitation of the tragedy at the Trade Unions House in Odesa (where pro-Russian activists died in the course of provoked street fighting) to create a state propaganda myth, invert the roles, and morally justify further aggression against Ukraine[1].

T0136 Cyber Operations

Use of the Fancy Bear hacker group, controlled by the security services, to compromise the software of Ukrainian artillery crews (through infection of Yaroslav Sherstiuk's application) in order to obtain geolocation data and destroy the artillery of the Armed Forces of Ukraine[3]. Targeted cyberattacks by Russian security services on distribution substations of the Ukrainian power grid in the winters of 2015 and 2016, aimed at causing mass power outages for the civilian population[4][5].

T0124 Deprivation of Electricity and Heating

Targeted cyberattacks by Russian security services on distribution substations of the Ukrainian power grid in the winters of 2015 and 2016, aimed at causing mass power outages for the civilian population[4][5].

T0137 Disinformation

A massive campaign of fabricating fakes to dehumanize Ukrainians (the myth of the "crucified boy" in Sloviansk, the invented death of a 10-year-old girl in Donetsk), as well as systematic editing of Wikipedia by Russian trolls to distort the facts about the war[3]. A targeted information operation to conceal the Russian Federation's responsibility for the destruction of passenger flight MH17 by simultaneously injecting numerous contradictory and absurd versions (the "Spanish air traffic controller Carlos," an attack by a Ukrainian ground-attack aircraft) to disorient the international community[3].

T0019 Military Intervention

Open crossing of the state border by regular troops of the Russian Federation in the summer and fall of 2014 and in early 2015 to save the separatists from defeat, which led to massive losses of the Ukrainian army (Ilovaisk, Debaltseve)[1][2].

T0021 Neutralization of the Opposition

Physical elimination of legitimate representatives of local government who put up open political resistance to the occupation (in particular, the brutal murder of Horlivka city council deputy V. Rybak for attempting to restore the Ukrainian flag)[1].

T0018 Proxy War

Seizure of Sloviansk by the armed group of I. Strelkov and the formation of the separatist DPR/LPR under the supervision of Russian political technologists (A. Borodai) to destabilize the region from within[1].

T0014 Sponsoring Domestic Extremism and Radicals

Instigation of armed clashes in Odesa on May 2, 2014, by pro-Russian activists (the "Anti-Maidan") with the aim of destabilizing the South of Ukraine, which escalated into street fighting and led to mass casualties in the Trade Unions House[1][2].

T0020 Staging a Coup

An attempted armed seizure of power in the spring of 2014 through the storming of regional administrations in Kharkiv, Donetsk, and Luhansk by externally instigated separatists. In Kharkiv, the coup was quickly suppressed by Ukrainian law enforcement[1].

T0022 Terror

Engagement in combat operations of Russian neo-Nazi groups (such as the "Rusich" sabotage and reconnaissance group under the command of A. Milchakov), whose ringleaders openly called for unmotivated sadistic violence against civilians ("Slaughter the homeless, the puppies, and the children!")[6].

T0110 Torture and Abuse

Systematic use of torture and physical violence against civilians in the occupied territories for any display of Ukrainian symbols or a pro-Ukrainian position[1].

Instruments

ID Name Description
S0012 Occupation and Controlled Administrations

Mass unlawful detentions and abductions of civilians: "people who take to the streets with Ukrainian flags are persecuted and detained"[1].

S0021 Propaganda

A massive campaign of fabricating fakes to dehumanize Ukrainians (the myth of the "crucified boy" in Sloviansk, the invented death of a 10-year-old girl in Donetsk), as well as systematic editing of Wikipedia by Russian trolls to distort the facts about the war[3]. A targeted information operation to conceal the Russian Federation's responsibility for the destruction of passenger flight MH17 by simultaneously injecting numerous contradictory and absurd versions (the "Spanish air traffic controller Carlos," an attack by a Ukrainian ground-attack aircraft) to disorient the international community[3].

S0010 Regular Army

Open crossing of the state border by regular troops of the Russian Federation in the summer and fall of 2014 and in early 2015 to save the separatists from defeat, which led to massive losses of the Ukrainian army (Ilovaisk, Debaltseve)[1][2].

S0017 Secret Police and Security Services

Seizure of Sloviansk by the armed group of I. Strelkov and the formation of the separatist DPR/LPR under the supervision of Russian political technologists (A. Borodai) to destabilize the region from within[1].

References