The group, believed to be a unit of the FSB, known as "Energetic Bear" or "Dragonfly," is the same group that has been caught breaking into American nuclear, water, power plants and airports. See our previous reporting on this actor: https://www.nytimes.com/2018/03/15/us/politics/russia-cyberattacks.html">https://www.nytimes.com/2018/03/1...
CISA confirms our reporting. Says Russian unit has "has targeted dozens of SLTT government and aviation networks..successfully compromised network infrastructure, and as of Oct. 1, exfiltrated data from at least two victim servers." https://us-cert.cisa.gov/ncas/alerts/aa20-296a">https://us-cert.cisa.gov/ncas/aler...
You can follow @nicoleperlroth.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: