The assortment of Russian hackers that were sanctioned play various roles in TrickBot’s operations, such as developing the ransomware gang’s malware and maintaining its servers.
Russian hackers has taken responsibility for a hacking campaign in Lithuania that has seen primarily government services hit by distributed denial of service (DDoS) cyber attacks.
Cyber espionage effort is focusing on the emails of targets, searching entire networks for terms relating to M&A discussions and corporate transactions using specialized tools.
Russian hackers are attacking MFA configuration weaknesses, something that is often set by default, and following up with a PrintNightmare attack to take over Windows systems.