Agencies alert: Russian GRU Unit 29155 hackers targeting global infrastructure

TLDR:

• Russian GRU Unit 29155 hackers targeted global critical infrastructure for espionage and sabotage since 2020.
• The FBI, CISA, and NSA, along with global partners, released a joint advisory detailing the cyber operations of Unit 29155.

Transnational security agencies have jointly assessed that cyber hackers linked to the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for cyber operations targeting global entities, including critical infrastructure organizations, for purposes of espionage , sabotage, and reputational damage since at least 2020. These hackers are separate from other known GRU-affiliated cyber groups and have targeted multiple organizations, including those in the transport, healthcare, and energy sectors, for various malicious activities. The U.S. FBI, CISA, NSA, and international partners have issued an advisory detailing the tactics, techniques, and procedures associated with Unit 29155 cyber actors, as well as providing mitigation recommendations for organizations to improve their cybersecurity posture against such threats.