Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure

This joint advisory from U.S. and international cyber agencies details pro‑Russia hacktivist groups exploiting exposed VNC connections to access HMI/OT devices across water, food/agriculture, and energy sectors; it documents their low‑sophistication TTPs (scanning, VPS usage, password brute force, VNC access, HMI manipulation), maps techniques to MITRE ATT&CK, and provides mitigations, incident response guidance, and resources to reduce OT internet exposure and strengthen authentication.