Intelligence and cyber security agencies of 10 countries have warned In a joint advisor Russian military intelligence service, a cyberpayan group run by GRU, has been targeting logistics and IT companies for the last three years. Known as APT28 and fancy bears in the safety industry, the actor is starting an attack against these goals using a variety of initial access strategies including passwords, speaking and exploitation of weaknesses in popular software.
“As the Russian military forces failed to meet their military objectives and Western countries assisted to support Ukraine’s regional defense, Unit 26165 (Russian GRU 85th GTSS) expanded its targeting of logistics institutions and technology companies involved in the distribution of assistance,” read the advisor. “These actors have also targeted the Internet -related cameras at the Ukrainian border crossing to monitor and track support shipments.”
The goals included dozens of government organizations and commercial institutions which were involved in the transportation of air, sea and rail. This includes defense industry companies, shipping and logistics companies, air traffic management agencies and IT services firm. The targeted countries were Bulgaria, Czech Republic, France, Germany, Greece, Italy, Moldova, Netherlands, Poland, Romania, Slovakia, Ukraine and America.