The threat actor under the moniker KozSec is now supporting Russia according to the message they shared on their Telegram channel.
After declaring their solidarity with Russia, the threat actor emphasized their actions as defensive measures to protect Russian interests against perceived Western encroachments. According to the message, their alleged attacks on Ukrainian infrastructure are not acts of aggression but rather defensive maneuvers aimed at countering the influence of NATO and protecting Russia.
Afterwards, the threat actor shared a message, claiming to have attacked Vodafone Ukraine. This alleged disruption affected 65,536 IP addresses and caused several domains to go down according to the message. KozSec framed this attack as a stance against current geopolitical tensions.