Security News > 2022 > April > Five Eyes nations fear wave of Russian attacks against critical infrastructure
The Five Eyes nations' cybersecurity agencies this week urged critical infrastructure to be ready for attacks by crews backed by or sympathetic to the Kremlin amid strong Western opposition to Russia's invasion of Ukraine.
"Given recent intelligence indicating that the Russian government is exploring options for potential cyberattacks against US critical infrastructure, CISA along with our interagency and international partners are putting out this advisory to highlight the demonstrated threat and capability of Russian state-sponsored and Russian aligned cybercrime groups," CISA Director Jen Easterly said in a statement.
The cybersecurity alert comes as Russian forces intensified their attacks against Ukraine along the eastern front, and the international community stepped up its support for the invaded nation while cracking down on Moscow.
In addition to Russian government agencies looking to attack critical infrastructure, the US and its allies warn that several Russian cybercrime groups pose a threat to these same foreign targets.
They still pose a threat, through ransomware and DDoS attacks against websites, that's directly related to the war in Ukraine, the Five Eyes warn.
Hive, which the FBI and security researchers started paying attention to in June 2021, is known for double-extortion ransomware attacks against healthcare organizations.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/04/21/five_eyes_russia/
Related news
- New IOCONTROL malware used in critical infrastructure attacks (source)
- Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks (source)
- CISA warns of critical Palo Alto Networks bug exploited in attacks (source)
- Critical Veeam RCE bug now used in Frag ransomware attacks (source)
- Critical bug in EoL D-Link NAS devices now exploited in attacks (source)
- Palo Alto Networks warns of critical RCE zero-day exploited in attacks (source)
- Critical RCE bug in VMware vCenter Server now exploited in attacks (source)
- CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks (source)
- Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks (source)
- North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks (source)