Russia hits US with new cyberattack: Details and impact
Photo: Russian cyberattack (GettyImages)
A new cyberattack has been recorded in the US, indicating attempts to gain hidden access to urban infrastructure systems, according to the Center for Countering Disinformation.
It is noted that the attackers used tools typically associated with criminal groups, which complicates the identification of the true initiator of the attack.
Attack on an engineering company
Hackers infiltrated the networks of a US engineering company that works with contractors in water supply, transportation systems, and emergency response sectors.
During the attack, they obtained data on internal processes and access levels related to the management of critical infrastructure facilities.
Use of criminal tools
The breach was conducted through the SocGholish-RomCom chain — a penetration method commonly used by cybercriminal groups.
This approach blurs the line between criminal operations and the activities of structures linked to Russia.
The use of these tools allows the attackers to mask the origin of the attack and delay the response of US intelligence services.
Objectives and aims of the attack
Targeting an engineering company indicates an interest in how infrastructure operates and in potential vulnerabilities that could be exploited for sabotage.
Experts note that even a partially successful attack can provide insights into how US cybersecurity teams respond and how quickly they can block threats.
Risks for US infrastructure
Each such incident creates a space where Russian-linked structures can test future interference scenarios.
Cyberspace is becoming a platform for rehearsing operations aimed at identifying weaknesses in the management of urban infrastructure in major US cities.
We remind that the Netherlands is expanding its support for Ukraine in the field of digital security, allocating 10 million euros to participate in the UK’s cyber program. The country’s Ministry of Foreign Affairs emphasized its readiness to strengthen the protection of Ukrainian infrastructure from growing cyber threats.
It is also noted that Canada has introduced another package of restrictions against Russia, extending sanctions to one hundred tankers of the so-called "shadow fleet" and to several companies that support the functioning of Russia's cyber infrastructure, increasing pressure on sectors involved in circumventing existing measures.
