U.S. authorities disrupt Russian intelligence’s botnet

In January 2024, an operation dismantled a network of hundreds of SOHO routers controlled by GRU Military Unit 26165, also known as APT 28, Sofacy Group, Forest Blizzard, Pawn Storm, Fancy Bear, and Sednit. This network facilitated various crimes, including extensive spearphishing and credential harvesting against entities of interest to the Russian government, such as U.S. and foreign governments, military, and key security and corporate sectors. This botnet was distinct from prior GRU and Russian … More →

The post …

a network apt apt 28 bear blizzard botnet credential credential harvesting crimes dismantled disrupt entities fancy bear fbi forest forest blizzard government gru intelligence interest january january 2024 justice department military network routers russian sofacy soho spearphishing storm