Europe Under Siege: Russian Brute Force Attacks Skyrocket, Exploiting Microsoft Infrastructure
Russian threat actors are launching a surge of brute force attacks against European networks, heavily exploiting Microsoft infrastructure. The attacks, originating mainly from Moscow, aim to exfiltrate data, disrupt services, and cause financial damage. Over 60% of the attack IPs are new, signaling an aggressive and evolving threat landscape.
Hot Take:
***Looks like brute force attacks are Russia’s new favorite pastime, but instead of breaking codes, they’re breaking passwords! Europe, brace yourselves—it’s going to be a wild ride.***
Key Points:
– Cybersecurity firm Heimdal reports a significant rise in brute force attacks on European corporate and institutional networks.
– Most attacks originate from Russia, specifically Moscow, targeting cities in the UK, Lithuania, Denmark, and Hungary.
– Attackers exploit Microsoft infrastructure, using SMBv1 crawlers, RDP crawlers, and alternative port crawlers.
– Over 60% of the IPs used are new or recently compromised.
– The attacks aim to exfiltrate data, disrupt services, deploy malware, and gain financially.