Russian state-sponsored threat actors linked to the GRU (Glavnoye Razvedyvatelnoye Upravleniye, or Main Intelligence Directorate) are increasingly breaching into critical infrastructure networks by exploiting basic configuration mistakes rather than software vulnerabilities, according to new research from Amazon Threat Intelligence. Amazon attributes the activity with high confidence to Sandworm, also tracked as APT44 and Seashell Blizzard.

Source: HackRead