Russia's Sandworm caught snarfing credentials, data from American and Brit orgs

An initial-access subgroup of Russia's Sandworm last year wriggled its way into networks within the US, UK, Canada and Australia, stealing credentials and data from "a limited number of organizations," according to Microsoft. Sandworm, the offensive cyber operations group that works for the Russian Military Intelligence Unit …

[Pascal Monett]

Well

"The crew uses several methods to compromise victims' internet-facing infrastructure and gain access to critical sectors including energy, oil and gas, telecommunications, shipping, arms manufacturing, and international governments "

So, what are you guys waiting for to isolate your critical infrastructure from the Internet ?

What is it going to take for you to understand ? A total meltdown ?

[MachDiamond]

Re: Well

"So, what are you guys waiting for to isolate your critical infrastructure from the Internet ?"

It's money. Why spend a few quid on a private telecommunications network when you can just run 'it' over the internet? Who is going to mess with a petroleum pipeline? Whoops.

This is the same issue with installing remote kill switches on cars. Sure, it would mean the cops could shut off the engine/motor of somebody fleeing, but a day after it comes out, somebody else is going to be able to turn off a whole load of cars going across a major bridge during rush hour. "What a nice transportation network you have here. It would be a shame if anything happened to it. "

[Yet Another Anonymous coward]

Re: Well

>The crew uses several methods to compromise victims' internet-facing infrastructure and gain access to critical sectors including energy, oil and gas, telecommunications, shipping, arms manufacturing,

Such as buying "international governments " ?

[Kev99]

Oh, yeah. Let's ALL of our proprietary, confidential, business critical data out on the web/cloud. It's perfectly safe. Besides, it's FREE!

web - a device used to catch unwary fish; made of stand of string or rope connecting an untold number of holes together.

cloud - an object made of vapor with no substantial surface; also known as a bunch of holes held together with vapor.

[sabroni]

re: web - a device used to catch unwary fish;

That's a net. A web isn't used to catch fish.

[Michael Hoffmann]

Doesn't seem that bad compared to DOGE:

https://arstechnica.com/tech-policy/2025/02/largest-data-breach-in-us-history-three-more-lawsuits-try-to-stop-doge/

[ecofeco]

Yep. The calls are coming from inside the house!

[ICL1900-G3]

Presumably, now that Trump and Putin are best mates, this will become just another business opportunity?

[EnviableOne]

Only 4 eyes

so who forgot New Zeland, either GRU or Microsoft can't tell the difference between Kiwis and Aussies