Loading threat actor…
The All-Russian Cossack Society (VSKO) is a state-aligned Russian organization established in 2018 to consolidate registered Cossack structures under centralized control. It operates as part of Russia’s broader militarization and mobilization ecosystem rather than as a conventional covert intrusion group. VSKO maintains close ties to the Russian state, and its national leadership is directly integrated into state authority. Under Ataman Vitaly Kuznetsov, succeeding Nikolai Doluda, the organization has coordinated Cossack hosts, youth movements, cadet institutions, and reserve-linked formations in support of Russia’s war effort. VSKO is associated with large-scale military-patriotic indoctrination and recruitment pipelines spanning kindergartens, schools, cadet corps, universities, and youth associations. These structures expose minors and young adults to weapons familiarization, military exercises, patriotic programming, and pathways into volunteer combat service. Cossack-affiliated educational and youth organizations are distributed across most Russian federal subjects, and the movement has reportedly involved hundreds of thousands of students and youth members. The organization is also linked to Russia’s reserve and volunteer force generation. Cossack personnel have been integrated into the BARS volunteer reserve system, including the BARS-15 Cossack battalion, which has participated in combat operations in Ukraine and has ties to regular Russian military structures. Russian authorities have treated Cossack organizations as an auxiliary mobilization resource, with plans to expand funding and formalize their role in a mobilization reserve. VSKO activity extends into occupied Ukrainian territories, where new Cossack hosts have been established and local populations have been recruited for cultural and military purposes. In these areas, Cossack structures support Russian occupation objectives by promoting pro-Russian identity formation and contesting Ukrainian national identity. Known associated structures include the Union of Cossack Youth, regional Cossack hosts, Cossack cadet corps, and combat-linked formations such as BARS-15.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.