Fancy Bear Strikes Again: Russian Hackers Wage Global Brute-Force Blitz

Russian military cyber unit APT28, aka Fancy Bear, has launched large-scale brute-force attacks on global cloud IT resources, targeting Microsoft Office 365 and other services. These attacks have been ongoing since mid-2019, aiming to collect and exfiltrate data while remaining under the radar.

Hot Take:

Well, well, well, if it isn’t Fancy Bear, back at it again. Judging by their persistence, you’d think they’re trying to win a brute-force marathon. Someone should tell them there’s no trophy for hacking the most Microsoft Office 365 accounts!

Key Points:

  • Russian military cyber unit, APT28 (Fancy Bear), linked to brute-force attacks.
  • Targets include cloud IT resources of government and private sector companies worldwide.
  • Brute-force attacks primarily aimed at Microsoft Office 365 services, but also targeted other service providers.
  • APT28 uses compromised accounts to exploit vulnerabilities in Microsoft Exchange servers.
  • Attacks disguised through Tor network and commercial VPN services to avoid detection.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here