US intelligence says hackers working for Russian military intelligence targeted Western technology and logistics companies involved in shipping assistance to Ukraine, with the goal of obtaining details about aid shipments and accessing internet-connected cameras near border crossings.
The hackers, linked to a notorious unit known as “Fancy Bear,” used tactics such as spearphishing and exploiting security vulnerabilities to gain access. They targeted over 10,000 internet-connected cameras, including private devices and public traffic cameras near critical transportation points in Ukraine, Romania, Poland, and other eastern European countries.
The cyber campaign began in 2022, the same year Russia invaded Ukraine, and is expected to continue as companies involved in aid logistics or shipments remain at risk. Authorities warn that the hackers may use the obtained information to hone their war planning or plot further cyber attacks on the supply chain to Ukraine.
Experts say the Russian team’s careful orchestration of the effort gives them a “granular understanding” of the aid sent to Ukraine, which could be used to inform future military operations or sabotage efforts. The US National Security Agency, FBI, and security agencies in several allied nations have issued a joint report detailing the cyberattack and warning companies to increase security precautions.
Source: https://apnews.com/article/russia-cyberattack-ukraine-aid-nsa-6308ca3e11c8299470df573e4f422878