Russia
Nation-state Dormant
- Mentions
- 7
- First seen
- 25 Jun 2026
- Last seen
- 24 Jul 2026
Relevant to you · Relevant
- Threat focus:
- espionage / aptindustrial / ot espionage
- Sector / region:
- ManufacturingDACH
Origin
Unattributed
Sources
inferred Confidence high
Profile
Russian cyber operations globally target critical infrastructure, communication platforms, and military logistics. Attacks on Zimbra servers, Signal and other messaging services, as well as on NATO transportation routes, demonstrate a broad threat landscape. Social engineering and weaknesses in security architectures are exploited. These activities particularly affect Western states and Ukraine.
Affected vendors
Zimbra
Targeted sectors
Communication ServicesCommunicationsTechnologyDefenseGovernmentcritical infrastructuredefensetransportationcommunicationgovernmentCritical InfrastructureTransportation
Targeted regions
EuropeEastern EuropeNorth America
Targeted countries
SwitzerlandUkraineUnited StatesUSUSAUnited KingdomGermany
Activity (8 weeks)
Recent activity
- Risky Bulletin: Western cyber agencies warn of Russian hacks of Zimbra servers Risky.Biz
- Weak Security Continues to Fuel Russian Cyberattacks darkreading
- US and allies warn of Russian critical infrastructure attacks BleepingComputer
- Spionageaktion: Nato-Transportwege mit gehackten Kameras ausgespäht Golem.de - Security
- Nach Signal-Attacken: USA bieten üppiges Kopfgeld für russische Hacker Golem.de - Security
- Russia used social engineering to breach prominent messaging accounts, Ukraine says The Record from Recorded Future News
- «Sicherheit Schweiz 2026»: Keine Entwarnung für die Schweiz News Service Bund