It's more complicated than that, the entire former soviet union area was (and is) a huge cybercrime outsourcing market. There are tons of little groups specializing on certain things and selling their services to others. Most notorious "Russian" or "Ukrainian" groups are just visible parts of transnational networks, and depend on the services of others in Russia, Ukraine, Kazakhstan, Baltics etc. In 2022 the supply chain got partially severed for ransomware and CC fraud in particular, however the black market still functions despite the war.
the war definitely changed those flows and targets; e.g. they now flood reddit with pro-Ukranian posts.
most of Russian agit-prop now flows out of "marketing" contractors in India, Pakistan, or Nigeria.