Heimdal Security Presents its Latest Report on Brute-Force Cyberattacks

Heimdal's investigation reports an ongoing Russia-linked brute-force campaign (dating back to at least May 2024) targeting high-value corporate and institutional accounts across Europe by abusing Microsoft infrastructure and major ISPs in the Netherlands, Belgium and Russia; attackers use SMBv1 and RDP crawlers and credential stuffing/spraying to compromise administrative accounts, with impacts including data theft, disruption, and potential sabotage, and the report urges stronger cloud security, MFA, audits, and user education.