Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure
ID: bdf30d70-cedc-5628-a5f3-a0d037cf8720
STIX ID: report--bdf30d70-cedc-5628-a5f3-a0d037cf8720
Feed Name: ThreatCluster
Threat Score
A 21-agency joint advisory warns that Russia's FSB Center 16 is actively exploiting poorly configured routers (default/weak SNMP credentials and legacy protocols) and known Cisco vulnerabilities (CVE-2018-0171, CVE-2008-4128) to infiltrate critical infrastructure sectors—defense, energy, healthcare, and finance—with links to a December 2025 attempted energy-grid attack that could have impacted ~500,000 people; UK/EU sanctions target 24 related actors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.