FBI, DHS warn Russian Dragonfly Group Still Targeting US Critical Infrastructure

The DHS and FBI issued a joint Technical Alert warning that Russian-linked 'Dragonfly' hackers conducted a multi-stage intrusion campaign since at least March 2016 against U.S. critical infrastructure (energy, nuclear, aviation, manufacturing, water). Attackers used spear-phishing, watering-hole websites, and compromises of small third-party suppliers to pivot into targeted networks and access ICS/SCADA-related files and configuration data; agencies published malware and indicator packages to help defenders detect compromises.