US, allies warn of pro-Russian hacktivist infrastructure attacks

A multinational coalition of 26 agencies from the U.S. and over a dozen allied nations has issued a stark advisory warning that pro-Russian hacktivist groups are actively targeting critical infrastructure, including energy, food, and water sectors, using relatively low-skill tactics that have nonetheless caused physical damage, according to Cybersecurity Dive.

The groups identifiedCyber Army of Russia Reborn, Sector16, NoName057(16), and Z-Pentestoften exploit poorly secured remote connections to industrial equipment through methods like password spraying and seizing control of Human Machine Interface (HMI) devices. According to the advisory, these actors "have limited capabilities" and frequently misunderstand the systems they attack, leading to "haphazard" but willfully harmful outcomes.

The U.S. Justice Department concurrently announced indictments against Ukrainian national Victoria Eduardovna Dubranova for her role in two of the groups, marking the first-ever charge of conspiracy to tamper with a public water system. Officials emphasized that the most critical defense is to reduce the exposure of operational technology (OT) devices to the public internet.