Pro-Russia Hacktivists Are Targeting Critical Infrastructure by Lucie Cardiet

A joint advisory warns that pro-Russia hacktivists are opportunistically disrupting OT/ICS by abusing exposed systems and weak/default credentials to gain legitimate remote access (e.g., VNC to HMI/SCADA), then changing settings, suppressing alarms, and causing loss of view—without malware or exploits—creating a significant detection gap; the article emphasizes reducing exposure and implementing behavioral detection across hybrid environments and promotes Vectra AI’s ability to spot misuse of valid access early.