Russian Hacker Breaches Companies, Sells Their Access and Spies on Ukrainian Military Sites

A Russian-speaking hacker has been linked to a broad operation that breached organizations worldwide, collected credentials, and prepared access for sale to ransomware groups. The activity affected education, healthcare, financial services, telecommunications, government bodies, and other organizations with internet-facing systems. The operator reportedly searched for exposed security appliances and public applications, then used known software flaws to enter networks. Once inside, the attacker gathered passwords, moved through internal systems, and in some cases gained full control of company identity systems. CloudSEK researchers identified the activity after finding an exposed server that contained a detailed record of the...

Read the full article at the source.