“The Hacker Group Funded by the Russian State has a large -scale cyberattack against logistics and technological companies related to the delivery of international assistance to Ukraine. At least 13 NATO and Ukraine members have been attacked.”, – WRITE: www.pravda.com.ua
Source: Analytical Report of Cybersecurity and Infrastructure Protection (CISA) Department of US Department of Internal Security
Details: According to the report, since the end of February 2022, the Russian GRU unit is the 85th Center for Special Services (Military Unit 26165), which is also known as the Fancy Bear, APT28, Forest Blizzard or Bluedelta in the cybersecurity community, which is also known as Fancy Bear, APT28, Forest Blizzard, etc..
Advertising:
The main goals of the campaign were logistics companies, IT enterprises and transport infrastructure that provide coordination, transportation and delivery of foreign aid to Ukraine.
Literally: “Actors attacked companies related to such sectors in NATO member countries, Ukraine and international organizations:
- Defense industry
- Transport and transport nodes (ports, airports, etc.)
- Maritime industry
- Air traffic management
- IT services
Details: The intelligence has also been recorded for at least one enterprise that is engaged in the production of components for industrial object management systems (ICS), in particular for rail management.
One of the priority goals of Russian hackers was transport invoices, including information about trains, aircraft and containers that show exactly what is going to Ukraine and when.
The report states that thousands of IP cameras were captured at border crossing points and railway units, which gave Russian intelligence the possibility of observing the columns of humanitarian aid in real time.
Cyber -attacks have touched at least 13 countries, including the Czech Republic, Germany, Poland, Romania, Ukraine and the United States.