Moldova.
If you are unaware why the Russians targeted a Moldovan energy company, this will help explain why.
https://apnews.com/article/eu-moldova-energy-russia-cuts-gazprom-3657d8204486044384a4b1a3b8105446
Russia's Curly COMrades is abusing Microsoft's Hyper-V hypervisor in compromised Windows machines to create a hidden Alpine Linux-based virtual machine that bypasses endpoint security tools, giving the spies long-term network access to snoop and deploy malware. "This hidden environment, with its lightweight footprint (only …