Security News > 2022 > January > US govt warns of Russian hackers targeting critical infrastructure

The FBI, CISA, and the NSA have warned critical infrastructure network defenders to be ready to detect and block incoming attacks targeting organizations from US critical infrastructure sectors, orchestrated by Russian-backed hacking groups.
"In some cases, Russian state-sponsored cyber operations against critical infrastructure organizations have specifically targeted operational technology/industrial control systems networks with destructive malware."
Russian state-sponsored APT actors targeting state, local, tribal, and territorial governments and aviation networks, September 2020, through at least December 2020.
Russian state-sponsored APT actors' campaign against Ukrainian critical infrastructure, 2015 and 2016.
In a third joint advisory published in April, the FBI, DHS, and CIA alerted US orgs of continued attacks linked to the Russian SVR against the US and foreign organizations.
In July, the US government also announced it's offering a reward of up to $10 million through its Rewards for Justice program for info on malicious cyber activities conducted by state-sponsored threat actors targeting the country's critical infrastructure sectors.
News URL
Related news
- CISA warns of hackers targeting critical oil infrastructure (source)
- Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp (source)
- Critical FortiSwitch flaw lets hackers change admin passwords remotely (source)
- Russian hackers attack Western military mission using malicious drive (source)
- China reportedly admitted directing cyberattacks on US infrastructure (source)
- Chinese hackers target Russian govt with upgraded RAT malware (source)
- Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery (source)
- Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp (source)
- Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised (source)
- France ties Russian APT28 hackers to 12 cyberattacks on French orgs (source)