Government agencies from the US, Canada and the UK warn of Russian threat actors targeting critical infrastructure in North America and Europe

Archived link

Pro-Russia hacktivists have been targeting and compromising small-scale Operational Technology (OT) systems in North American and European Water and Wastewater Systems (WWS), Dams, Energy, and Food and Agriculture Sectors. They aim to exploit modular, internet-exposed Industrial Control Systems (ICS), targeting software components like human machine interfaces (HMIs). The threat actors were observed using methods such as exploiting virtual network computing (VNC) remote access software and default passwords.

The malicious activity began in 2022 and is still ongoing. The government agencies urge OT operators in critical infrastructure sectors to implement a set of mitigations provided in the advisory.

  • forwardvoid@feddit.nlEnglish
    2·
    6 months ago

    “Pro-russia hacktivists” that’s a weird way to say “state sponsored hackers”. Also they are using open VNC and default passwords? Really? The parties responsible for that infrastructure should be ashamed.