{"description": "russia-colonialism techniques used by Continuation of the Russo-Ukrainian War: Armed Aggression in the Donbas (2014\u20132015), ATT&CK campaign C0101 (v1.1)", "name": "Continuation of the Russo-Ukrainian War: Armed Aggression in the Donbas (2014\u20132015) (C0101)", "domain": "russia-colonialism", "versions": {"layer": "4.5", "attack": "", "navigator": "5.2.0"}, "techniques": [{"techniqueID": "T0053", "comment": "Mass unlawful detentions and abductions of civilians in the occupied territories: \"armed groups continued to commit abductions, to subject people to physical and psychological torture and ill-treatment,\" and \"people were abducted for ransom, for forced labor, and for exchange for fighters captured by the Ukrainian authorities\"(Citation: \u0414\u043e\u043a\u043b\u0430\u0434 \u0412\u0435\u0440\u0445\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0441\u0441\u0430\u0440\u0430 \u041e\u041e\u041d \u043f\u043e \u043f\u0440\u0430\u0432\u0430\u043c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0430\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435 (A/HRC/27/75) 2014).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0005", "comment": "The exploitation of the Odesa tragedy to build a state propaganda myth and invert the roles: the actual picture, per the UN, is clashes \"between supporters of unity and supporters of the federalization of Ukraine, as a result of which 48 people died,\" while the investigation remains incomplete and \"no one has yet been held to account\"(Citation: \u0414\u043e\u043a\u043b\u0430\u0434 \u0412\u0435\u0440\u0445\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0441\u0441\u0430\u0440\u0430 \u041e\u041e\u041d \u043f\u043e \u043f\u0440\u0430\u0432\u0430\u043c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0430\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435 (A/HRC/27/75) 2014). The tragedy was used as moral justification for further aggression - by the same device as the \"crucified boy\" fake, for which \"there is no evidence to support Pyshniak's claim\"(Citation: Fake: Crucifixion in Slovyansk 2014).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0136", "comment": "The use of a hacker group linked to the security services to compromise Ukrainian artillerymen's software: \"the filename '\u041f\u043e\u043f\u0440-\u041430.apk' was linked to a legitimate application which was initially developed domestically within Ukraine by an officer of the 55th Artillery Brigade named Yaroslav Sherstuk,\" and \"in-depth reverse engineering revealed the APK contained an Android variant of X-Agent\" - an implant whose exclusive operator is FANCY BEAR(Citation: Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units 2016). The same toolkit was used in cyberattacks on the Ukrainian power grid in the winters of 2015 and 2016(Citation: 2015 Ukraine Electric Power Attack | MITRE ATT&CK\u00ae 2023)(Citation: 2016 Ukraine Electric Power Attack | MITRE ATT&CK\u00ae 2023).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0124", "comment": "Targeted cyberattacks by Russian security services on distribution substations of the Ukrainian power grid in the winters of 2015 and 2016, aimed at causing mass power outages for the civilian population(Citation: 2015 Ukraine Electric Power Attack | MITRE ATT&CK\u00ae 2023)(Citation: 2016 Ukraine Electric Power Attack | MITRE ATT&CK\u00ae 2023).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0137", "comment": "A massive campaign of fabricating fakes to dehumanize Ukrainians: on state television it was claimed that \"Ukrainian armed forces herded city residents to the central square and publicly executed a small boy and his mother,\" yet \"there is no evidence to support Pyshniak's claim,\" and the residents of Sloviansk who were interviewed did not confirm the story(Citation: Fake: Crucifixion in Slovyansk 2014). The same method produced the fabricated \"death of a 10-year-old girl\" in the Petrovskyi district of Donetsk (March 2015): BBC correspondents on the ground established that no such girl had ever existed(Citation: \u0411\u0438 \u0411\u0438 \u0421\u0438 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u043b\u0438 \u043b\u043e\u0436\u044c \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u041c\u0418 \u043e \u044f\u043a\u043e\u0431\u044b \u043f\u043e\u0433\u0438\u0431\u0448\u0435\u0439 10-\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0435\u0432\u043e\u0447\u043a\u0435 (StopFake) 2015). In parallel ran an operation to conceal responsibility for the destruction of flight MH17: the Russian Ministry of Defense \"made a series of self-contradictory claims blaming Ukraine, rather than Russia or Russian-led separatists, for the Boeing 777's shoot down,\" while a deputy defense minister publicly repeated \"a fabricated claim that originated on Twitter of how a Spanish air traffic controller named Carlos saw two Ukrainian fighter jets near MH17\"(Citation: The Kremlin's Shifting, Self-Contradicting Narratives on MH17 2019).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0019", "comment": "The overt crossing of the state border by regular Russian troops in the summer and autumn of 2014 to save the separatists from defeat: the \"DNR\" commander admitted that the decisive role was played by Russian servicemen who came \"on leave\" - \"it was mostly 'vacationers' who advanced on Mariupol. When they left, both the front line and the opportunities became precarious\"(Citation: \u0421\u0442\u0440\u0435\u043b\u043a\u043e\u0432: \u0421\u043f\u0443\u0441\u043a\u043e\u0432\u043e\u0439 \u043a\u0440\u044e\u0447\u043e\u043a \u0432\u043e\u0439\u043d\u044b \u043d\u0430\u0436\u0430\u043b \u044f 2014). The offensive resulted in heavy losses for the Ukrainian army near Ilovaisk and Debaltseve. The presence of regular troops continued into 2015: the GRU men captured near Shchastia were \"soldiers of the 3rd Separate Guards Special Purpose Brigade of the Main Directorate of the General Staff of the Russian Armed Forces, who arrived on the territory of Ukraine on March 26 and were quartered in Luhansk\"(Citation: \u00ab\u041a\u043e\u0440\u043e\u0447\u0435, \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u2014 \u0440\u043e\u0441\u0441\u0438\u044f\u043d\u0435\u00bb. \u041a\u0430\u043a \u0438\u0441\u043a\u0430\u043b\u0438, \u0441\u0443\u0434\u0438\u043b\u0438 \u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u043b\u0438 \u043a\u0430\u043f\u0438\u0442\u0430\u043d\u0430 \u0415\u0440\u043e\u0444\u0435\u0435\u0432\u0430 \u0438 \u0441\u0435\u0440\u0436\u0430\u043d\u0442\u0430 \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440\u043e\u0432\u0430 (\u041c\u0435\u0434\u0438\u0430\u0437\u043e\u043d\u0430) 2016).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0021", "comment": "The physical elimination of legitimate representatives of local government who resisted the occupation: \"the mutilated body of Volodomyr Rybak, a member of the 'Batkivshchyna' party and deputy of the Municipal Council of Horlivka (Donetsk region), was found near the village of Raihorodok,\" and \"Rybak was abducted on April 17 by pro-Russians, following a pro-Ukrainian gathering in Horlivka. He was then tortured and murdered\"(Citation: Ukraine: The Forgotten Victims (FIDH) 2014).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0018", "comment": "The seizure of Sloviansk by an armed group that had crossed the border, and the formation of the separatist \"DNR\"/\"LNR\": the detachment's commander openly admitted that \"in practice it was our detachment that set in motion the flywheel of the war that is still going on,\" and that \"it was I, after all, who pulled the trigger of the war\"(Citation: \u0421\u0442\u0440\u0435\u043b\u043a\u043e\u0432: \u0421\u043f\u0443\u0441\u043a\u043e\u0432\u043e\u0439 \u043a\u0440\u044e\u0447\u043e\u043a \u0432\u043e\u0439\u043d\u044b \u043d\u0430\u0436\u0430\u043b \u044f 2014). In parallel, \"groups of armed men unlawfully carried out a well-organized and coordinated seizure of public buildings and police and security service offices\"(Citation: \u0414\u043e\u043a\u043b\u0430\u0434 \u0412\u0435\u0440\u0445\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0441\u0441\u0430\u0440\u0430 \u041e\u041e\u041d \u043f\u043e \u043f\u0440\u0430\u0432\u0430\u043c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0430\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435 (A/HRC/27/75) 2014). The \"republic's\" leadership was from the outset dispatched from Moscow: \"Alexander Boroday - the first prime minister of the DNR, who in 2014 handed over his powers to Alexander Zakharchenko,\" a Muscovite raised \"in an intelligentsia Moscow family\"(Citation: \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u0411\u043e\u0440\u043e\u0434\u0430\u0439: \u044f \u043c\u043e\u0433\u0443 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f, \u043d\u043e \u043d\u0435 \u043d\u0430 \u0414\u043e\u043d\u0431\u0430\u0441\u0441, \u0430 \u0443\u0436\u0435 \u0432 \u041a\u0438\u0435\u0432 (\u0410\u0438\u0424) 2016).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0162", "comment": "test", "showSubtechniques": true}, {"techniqueID": "T0014", "comment": "The instigation of armed clashes in Odesa on May 2, 2014: the UN records the violence committed \"in Odesa on 2 May 2014 during clashes between supporters of unity and supporters of the federalization of Ukraine, as a result of which 48 people died, mostly supporters of the country's federalization,\" and notes that \"no one has yet been held to account\"(Citation: \u0414\u043e\u043a\u043b\u0430\u0434 \u0412\u0435\u0440\u0445\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0441\u0441\u0430\u0440\u0430 \u041e\u041e\u041d \u043f\u043e \u043f\u0440\u0430\u0432\u0430\u043c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0430\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435 (A/HRC/27/75) 2014). The culmination was the fire in the Trade Union Building where activists had taken refuge: the UN monitoring mission listed among the key uninvestigated questions \"what caused the fire in the Trade Union building\" and \"who are the perpetrators of the killings\"(Citation: Report on the human rights situation in Ukraine, 15 June 2014 (OHCHR) 2014).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0020", "comment": "An attempted armed seizure of power in the spring of 2014 by storming regional administrations: the UN recorded that already \"in mid-April 2014\" \"groups of armed men unlawfully carried out a well-organized and coordinated seizure of public buildings and police and security service offices in towns and villages of the Donetsk and Luhansk regions,\" and \"in order to retain control of the seized areas these groups erected barricades and checkpoints\"(Citation: \u0414\u043e\u043a\u043b\u0430\u0434 \u0412\u0435\u0440\u0445\u043e\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0441\u0441\u0430\u0440\u0430 \u041e\u041e\u041d \u043f\u043e \u043f\u0440\u0430\u0432\u0430\u043c \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u043e \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0430\u0432 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u0435 (A/HRC/27/75) 2014). In Kharkiv the coup was quickly suppressed.", "score": 1, "color": "#66b1ff", "showSubtechniques": false}, {"techniqueID": "T0022", "comment": "Engagement in combat operations of Russian neo-Nazi groups (such as the \"Rusich\" sabotage and reconnaissance group under the command of A. Milchakov), whose ringleaders openly called for unmotivated sadistic violence against civilians (\"Slaughter the homeless, the puppies, and the children!\")(Citation: \u0420\u0430\u0448\u0438\u0437\u043c: \u0417\u0432\u0456\u0440 \u0437 \u0431\u0435\u0437\u043e\u0434\u043d\u0456 2023).", "score": 1, "color": "#66b1ff", "showSubtechniques": false}], "gradient": {"colors": ["#ffffff", "#66b1ff"], "minValue": 0, "maxValue": 1}, "legendItems": [{"label": "used by Continuation of the Russo-Ukrainian War: Armed Aggression in the Donbas (2014\u20132015)", "color": "#66b1ff"}]}