CyberzSOC

Russian Federal Security Service (FSB) Center 16 cyber actors continue to exploit poorly configured and vulnerable networking devices worldwide, opportunistically compromising multiple critical infrastructure sector networks. This joint Cybersecurity Advisory (CSA) builds on FBI’s Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure Public Service Announcement of the decade-plus FSB Center 16 cyber activity by providing additional tactics, techniques, and procedures (TTPs) to enable defenders to more fully understand and counter the threat. [1] This CSA is being released by the following authoring and co-sealing agencies: Communications Security Establishment Canada’s (CSE’s) Canadian Centre for Cyber Security (Cyber Centre) Czech Republic National Cyber and Information Security Agency (NÚKIB) (1) Danish Defence Intelligence Service (DDIS) (2) Estonian Foreign Intelligence Service (EFIS) (3) Estonian Information System Authority (RIA) (4) Finnish Defence Intelligence (FDI) (5) Finnish Security and Intelligence Service (SUPO) (6) Italian External Intelligence and Security Agency (AISE) (8) Italian Internal Intelligence and Security Agency (AISI) (9) The Military Counterintelligence Service of Poland (SKW) (10) Sweden National Cyber Security Centre (NCSC-SE) (11) The authoring and co-sealing agencies strongly urge device owners and network defende…