Part I: Identifying Potential Targets

To understand if you might be a target, consider the following questions:

1. Are you involved in significant political roles or have influence within your community?
2. Could a breach of your digital devices pose a threat to your safety or that of others?
3. Do you manage substantial financial resources?
4. Are you connected to any public infrastructure, such as utility services that supply energy or water?

If you answered yes to any of these, it’s crucial to proceed to Part II of this discussion. Conversely, if you responded no to all, you’re likely not a target for organized cyber attacks. Breathe easy!

However, it’s important to remember that even if you’re not in the crosshairs of state-sponsored hackers, investing in your cyber security is still essential. Your assets—no matter their size—are valuable to you. Unfortunately, there are numerous skilled hackers and scammers eager to exploit anyone's vulnerabilities.

Consider these unfortunate scenarios:

• A family member fell victim to a scam, losing $50,000 to a phishing operation. While this amount is inconsequential to state-sponsored hackers, it’s significant enough for smaller groups to target individuals.
• A college friend had her identity stolen after unwittingly sharing sensitive information over the phone with someone posing as a legitimate authority.

These situations can happen to anyone, underscoring the need for diligent digital preparedness.

Part II: Strengthening Your Cyber Security

There are practical measures everyone can adopt to bolster their digital security. Below are some top recommendations and the time you might need to implement them.

1. Implement Multi-Factor Authentication (MFA)

I can’t stress enough how vital MFA is. It’s free, user-friendly, and can significantly enhance your account security. MFA adds a layer of protection by requiring a time-sensitive code from your phone, making unauthorized access much harder.

For an in-depth look at MFA, check out Episode #36 of my newsletter, where I discuss its benefits. I personally rely on the Authy app by Twilio for managing my MFA accounts, and it’s a robust resource for setting up MFA across various platforms.

2. Use an Open-Source Password Manager

I recommend BitWarden as your password manager. It’s free and open-source, which enhances its security compared to proprietary options like 1Password or LastPass. An open-source solution allows for transparency and community vetting, essential for maintaining trust.

Having a password manager helps avoid the common pitfall of using similar passwords across multiple sites. Instead, utilize BitWarden to auto-generate complex and unique passwords for each account.

3. Adopt a Secure Messaging Platform

For sensitive communications, opt for trusted platforms that offer end-to-end encryption. Signal and Wire are reliable choices, and I discuss their features in Episode #39 of my newsletter. I personally use Signal for important conversations.

For secure email, ProtonMail is highly regarded, offering both free and premium options.

4. Limit Your Location Tracking

It's crucial to manage how your smartphone tracks you. High-profile individuals often leave their phones behind when traveling to avoid being monitored. Contrary to popular belief, putting your phone in airplane mode doesn’t stop it from tracking your location.

Here's a video demonstrating this:

If you suspect you could be a target, consider utilizing a more secure mobile device.

Part III: Assessing Potential Scenarios

To grasp what actions Russia might take, adopt the mindset of a leader looking to destabilize an opponent. Russia has a history of employing cyber tactics to create chaos even before any military engagement occurs.

This includes disinformation campaigns and significant cyber breaches, such as the SolarWinds attack in 2020. Should a cyberwar escalate, the focus will likely be on critical public infrastructure, which impacts everyone.

In fact, cyber threats to American infrastructure have been escalating for years. For instance, in 2018, then-Secretary of Energy Rick Perry reported that cyber attacks were occurring hundreds of thousands of times daily. Just last year, the hacking group “Dark Side” compromised the Colonial Pipeline, showcasing the vulnerabilities of essential services.