Skip to main content

Tag: russian hackers

10 articles

Industrial control room with scattered computer screens and panels, natural daylight through a large window.

Russian Hackers Breach Polish Power Plant via Private APN

In a chilling cyberattack, Russian hackers infiltrated a Polish power plant by breaching a wind farm's VPN and firewall, then exploited a cellular router to gain control of the plant's systems. The attackers forced a combined heat and power plant into a controlled shutdown, overriding its operations with a password-protected lock.

Analyst 207
Rows of computer servers and networking equipment with a focused Microsoft Exchange server interface on a screen.

Russian Hackers Exploit Microsoft OWA Flaw to Maintain Mailbox Access

Russian hackers have found a sneaky way to keep access to Microsoft mailboxes by exploiting a flaw in Outlook Web Access, making it tough to shake them off even with a full system overhaul. Simply put, these cyber intruders can stick around unless their presence is manually erased from the Exchange server.

Analyst 207
Government office building lobby with subtle email setup, blurred figure in background.

Russian Hackers Exploit Exchange Zero-Day for Long-Term Mailbox Access

Russian hackers have unleashed a powerful tool, dubbed OWAReaper, exploiting a zero-day flaw in Exchange Outlook Web Access to gain long-term access to mailboxes, with Proofpoint hailing it as the most sophisticated backdoor delivered via half-click exploits they've ever seen. The attack, linked to the Russian state-sponsored group Laundry Bear, cleverly uses a cross-site scripting flaw to execute arbitrary JavaScript in victims' browsers.

Analyst 207
Government officials gather in a secure briefing room with a computer screen visible in the background.

Russian Hackers Exploit Zimbra Flaw for Widespread Email Theft

Russian hackers have exploited a Zimbra flaw, CVE-2025-66376, to steal emails from targeted organizations, allowing them to automatically collect a victim's last 90 days of email without requiring any interaction. This alarming vulnerability was weaponized by the Russian state-sponsored group Laundry Bear using a combination of phishing and specially crafted HTML emails.

Analyst 207
Dimly lit workstation with worn laptop showing distorted CAPTCHA prompt amidst clutter and broken office supplies.

Russian Hackers Exploit ClickFix CAPTCHAs to Spread Malware in Ukraine

Ukraine's Computer Emergency Response Team (CERT-UA) warns that Russian hackers, part of the notorious Sandworm group, are using manipulated CAPTCHAs to trick victims into downloading malware, specifically targeting Ukraine with data-stealing attacks. They've been linked to a series of social engineering scams that spread malware through legitimate websites.

Analyst 207
Laptop on cluttered home office desk with video conferencing installer open, surrounded by papers and a smartphone.

Russian Hackers Trojanize WebEx, Zoom with Starland Malware

Beware of a sneaky new malware campaign that's been targeting over 40 cryptocurrency wallets and popular apps like WebEx and Zoom since June 2025. A financially motivated Russian threat actor is behind the attacks, using trojanized installers to spread the Starland malware.

Analyst 207
Technicians monitor rows of networking equipment with blinking lights in a dimly lit control room.

Russian Hackers Target Network Devices With Exploits

Russian hackers, linked to the Federal Security Service's Center 16, have been actively targeting critical US and foreign networks across multiple sectors, including defense, energy, and healthcare, for over a decade. This ongoing threat has compromised networks in various industries, posing significant risks to national security and global stability.

Analyst 207
Rows of generic routers on a rack in a neutral-colored server room with blank labels.

Russian Hackers Target Routers Globally, Warn Cybersecurity Agencies

A brazen plot by Russian hackers to disrupt global networks was thwarted, but not before cybersecurity agencies warned of a potentially catastrophic attack that could have left 500,000 citizens shivering in the dark. The hackers, linked to Russia's Federal Security Service, targeted vulnerable routers worldwide using simple and easily exploitable passwords.

Analyst 207
Large empty internet router centered on a rack in a neutral-colored industrial network closet.

Russian Hackers Target Critical Infrastructure via Router Exploits

Russian state-backed hackers have infected 18,000 routers in 120 countries, sparking a multinational warning about the threat to critical infrastructure networks. The alarming campaign is linked to Russia's Federal Security Service (FSB) Centre 16, notorious for exploiting poorly configured routers to gain access to sensitive networks.

Analyst 207
Dimly lit server room with rows of computer servers and networking equipment, suggesting a compromised environment.

Russian Hackers Upgrade Kazuar Backdoor to Modular Botnet

Microsoft researchers have uncovered a significant upgrade to the Kazuar backdoor, transforming it into a modular peer-to-peer botnet by the notorious Russian hacker group, Secret Blizzard. This sophisticated tool has been used to target high-stakes organizations and critical systems across Europe, Asia, and Ukraine.

Analyst 207