Belarus is both. Cyber Partisans have mounted significant cyber operations against Belarusian state systems and Russian targets, while the Lukashenka government gives Moscow military access, logistical support, defense-industrial links and a security environment closely aligned with Russia. The key distinction is between independent opposition hackers and state-aligned activity: Belarus is a cyber arena in its own right as well as an enabler of Russian operations.
What does “cyber upstart” mean in Belarus?
The clearest example of an indigenous Belarusian cyber capability is Cyber Partisans, an opposition group described by CyberScoop as including disaffected officers and technology-sector dissidents. Its operations have targeted government systems and exposed internal material. That makes it a meaningful cyber actor, but not an extension of the Belarusian government or proof that the country has an autonomous state cyber program comparable to Russia’s.
The group’s aims and targets also matter. Cyber Partisans say their operations oppose political repression; their activity should not be conflated with government surveillance or with Russian military cyber operations simply because all involve Belarusian systems or territory.
What the reported operations show
Freedom House’s 2024 Belarus report records more than 50 attacks claimed by Cyber Partisans since 2020, including at least six during 2023–2024. The report names intrusions affecting Belarusian State University, state news agency BelTA, chemical producer Grodno Azot, Belarusian Railways, and the KGB website and database. These incidents indicate reach across public institutions, industry and transport, although a tally of claimed operations is not an independent measure of every intrusion’s impact.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
In April 2024, Cyber Partisans claimed they had accessed files relating to more than 8,600 current and former Belarusian KGB employees. The Associated Press reported that Belarusian authorities had not commented on the claim. Freedom House also describes approximately 40,000 denunciations, covering records from 2014–2023, as allegedly leaked from a KGB database. These disclosures are evidence of the group’s focus on state security structures, but the claims should remain attributed rather than treated as officially verified.
Are Belarusian hackers independent from Russia?
There is no single answer because “Belarusian hackers” covers actors with different allegiances. Cyber Partisans are an opposition group; other activity is described as likely linked to the Belarusian and Russian governments; and some prominent operations in the region have been attributed to Russian military actors. Similar geography or shared targets do not establish shared command.
| Actor or activity | Relationship and evidence | What the evidence does not establish |
|---|---|---|
| Cyber Partisans | Opposition hackers whose attacks and disclosures are documented as claims in Freedom House’s 2024 report and AP reporting. | That they operate for either government, or that every claimed intrusion was independently verified. |
| Ghostwriter | Freedom House describes the group as likely linked to the Belarusian and Russian governments. Since 2016, it has hacked websites and social accounts and spread anti-US and anti-NATO narratives. | A definitive public attribution to a specific government agency or a single chain of command. |
| Moustached Bouncer, Winter Vivern and Asylum Ambuscade | Freedom House describes these groups as likely linked to the two governments and says their activity increased after Russia’s invasion of Ukraine. | That every operation attributed to a named group was directed from Belarus or coordinated with Russian military units. |
| GRU Unit 29155 | A multinational NSA-led advisory attributes malicious activity since at least 2020 to actors affiliated with Russia’s GRU 161st Specialist Training Center, also known as Unit 29155. | That the advisory proves every Belarus-linked cyber incident was conducted from Belarus or by Belarusian actors. |
The distinctions are consequential. The NSA, FBI, CISA and international partners’ advisory assesses Unit 29155 activity as involving espionage, sabotage and reputational harm. It reports deployment of the WhisperGate wiper against Ukrainian organizations as early as January 2022, and targeting of NATO organizations in Europe and North America as well as entities in Latin America and Central Asia. This is evidence of Russian cyber capability relevant to the regional threat picture, not proof that Belarus directed those operations.
How does Belarus help enable Russian operations?
Belarus’s value to Moscow is broader than a possible cyber launch point. The U.S. Treasury says the Lukashenka regime hosts Russian military bases and allows Russian forces to use Belarus as a staging point for military operations. Treasury designations also describe Belarusian companies supplying Russian defense enterprises, along with cargo and logistics businesses supporting Russian defense activities and military transport.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsSecurity and surveillance integration
CyberScoop reports that Belarus adopted Russia’s SORM lawful-intercept system. Shared technical and bureaucratic infrastructure can make the two countries’ security systems more compatible and blur the practical boundary between their services. That compatibility strengthens the environment in which governments can monitor communications; it does not, by itself, prove that a particular cyberattack was jointly planned or executed.
Military access, logistics and industry
Military access and support networks give Russia ways to use Belarusian territory and organizations in support of operations. Treasury’s designations describe defense-industrial links including Peleng’s optical systems and related precision-machining and sensor supply chains, as well as Belarusian cargo and logistics companies connected to Russian defense activity. Those documented relationships make Belarus an enabler of Russian military capacity beyond cyberspace.
Railways illustrate how infrastructure can become strategically relevant. AP reported three Belarusian Railways hacks in 2022 that hijacked traffic-light and control systems and disrupted the transit of Russian military equipment toward Ukraine. The incidents are significant because they affected a route used for military movement. Where attribution or the full operational details rest on reported claims, they should be understood as such rather than as independently verified proof of who carried out every action.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is the best way to classify Belarus?
Assess Belarus on four separate questions rather than forcing it into a single label:
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Best Value
- Who is acting? Cyber Partisans are an opposition group; Ghostwriter and several other named groups are described by Freedom House as likely linked to the Belarusian and Russian governments; Unit 29155 is attributed by a multinational advisory to Russia’s GRU.
- What capability is visible? Reported intrusions, leaks and disruptions show that opposition actors can affect state and infrastructure systems. They do not make all claimed effects independently confirmed or identify the operator in every case.
- How integrated is the state security environment? The reported adoption of SORM and shared security infrastructure point to close compatibility with Russia, distinct from proof of joint responsibility for an individual incident.
- What does Russia gain? Bases, staging access, logistics, rail routes and defense-industrial supply links give Moscow concrete military and material advantages from its relationship with Belarus.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
