Skip to content
Auto-CTI
Back to all actors

Russia

Nation-state Dormant
Mentions
7
First seen
25 Jun 2026
Last seen
24 Jul 2026

Relevant to you · Relevant

Threat focus:
espionage / aptindustrial / ot espionage
Sector / region:
ManufacturingDACH

Origin

Unattributed

Sources

inferred Confidence high

Profile

Russian cyber operations globally target critical infrastructure, communication platforms, and military logistics. Attacks on Zimbra servers, Signal and other messaging services, as well as on NATO transportation routes, demonstrate a broad threat landscape. Social engineering and weaknesses in security architectures are exploited. These activities particularly affect Western states and Ukraine.

Affected vendors

Zimbra

Targeted sectors

Communication ServicesCommunicationsTechnologyDefenseGovernmentcritical infrastructuredefensetransportationcommunicationgovernmentCritical InfrastructureTransportation

Targeted regions

EuropeEastern EuropeNorth America

Targeted countries

SwitzerlandUkraineUnited StatesUSUSAUnited KingdomGermany

Activity (8 weeks)

31
32
33
34
35
36
37
38

Recent activity

ESC