Pro-Russia Hacktivists Target Critical Infrastructure with Low-Sophistication Attacks
Summary
Hide ▲
Show ▼
Pro-Russia hacktivist groups are conducting opportunistic, low-sophistication cyberattacks against U.S. and global critical infrastructure. These attacks target a wide range of sectors, including water treatment facilities and oil well systems, using easily repeatable methods. The groups exploit minimally secured, internet-facing virtual network computing (VNC) connections to gain unauthorized access to operational technology (OT) control devices. The joint advisory from CISA, FBI, NSA, and global partners urges immediate action to mitigate these threats. The advisory highlights the use of basic methods to target supervisory control and data acquisition (SCADA) networks, sometimes combined with DDoS attacks. The cumulative impact of these activities poses a persistent and disruptive threat to essential services.
Timeline
-
09.12.2025 14:00 1 articles · 15h ago
Pro-Russia Hacktivists Exploit VNC Connections to Target Critical Infrastructure
Pro-Russia hacktivist groups are conducting opportunistic, low-sophistication cyberattacks against U.S. and global critical infrastructure. These attacks target a wide range of sectors, including water treatment facilities and oil well systems, using easily repeatable methods. The groups exploit minimally secured, internet-facing VNC connections to gain unauthorized access to OT control devices. The joint advisory from CISA, FBI, NSA, and global partners urges immediate action to mitigate these threats.
Show sources
- CISA, FBI, and U.S. and Global Partners Urge Immediate Action to Defend Critical Infrastructure from Pro-Russia Hacktivist Threats — www.cisa.gov — 09.12.2025 14:00
Information Snippets
-
Pro-Russia hacktivist groups are targeting critical infrastructure with opportunistic, low-sophistication attacks.
First reported: 09.12.2025 14:001 source, 1 articleShow sources
- CISA, FBI, and U.S. and Global Partners Urge Immediate Action to Defend Critical Infrastructure from Pro-Russia Hacktivist Threats — www.cisa.gov — 09.12.2025 14:00
-
These attacks exploit minimally secured, internet-facing VNC connections to gain unauthorized access to OT control devices.
First reported: 09.12.2025 14:001 source, 1 articleShow sources
- CISA, FBI, and U.S. and Global Partners Urge Immediate Action to Defend Critical Infrastructure from Pro-Russia Hacktivist Threats — www.cisa.gov — 09.12.2025 14:00
-
The groups use basic methods to target SCADA networks, sometimes combined with DDoS attacks.
First reported: 09.12.2025 14:001 source, 1 articleShow sources
- CISA, FBI, and U.S. and Global Partners Urge Immediate Action to Defend Critical Infrastructure from Pro-Russia Hacktivist Threats — www.cisa.gov — 09.12.2025 14:00
-
The joint advisory provides several actions and mitigations to reduce the risk of being targeted.
First reported: 09.12.2025 14:001 source, 1 articleShow sources
- CISA, FBI, and U.S. and Global Partners Urge Immediate Action to Defend Critical Infrastructure from Pro-Russia Hacktivist Threats — www.cisa.gov — 09.12.2025 14:00