Critical industries targeted by Russian hackers according to Australian Signals Directorate

Australia’s critical industries have been warned they are being targeted by Russian hackers who are exploiting poorly configured network devices. The Australian Signals Directorate (ASD) issued a joint statement with authorities from a dozen other nations warning hackers from the Russian Federal Security Service Centre 16 continue to manipulate compromised critical infrastructure networks. The industries most at risk include communications, defence, health, finance, energy and government services. The hackers are linked to notable cyber threat groups known as Beserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard and Static Tundra. ASD warned hackers scanned the internet for devices that used Simple Network Management Protocol and weak or default passwords, which they used to try and access information. “They look for exposed management services, weak security settings, and known vulnerabilities. They use these weaknesses to steal network information and user credentials,” the ASD warned. “Cyber actors can use this information to carry out further malicious activity. The advisory highlights the need to secure network devices and fix known vulnerabilities.” The ASD urged organisations too assess whether they were vulnerable to an attack and secure network devices to reduce the risk of a cyberattack. “They should apply security updates and strengthen network security controls,” an ASD spokesman said. “These recommendations are not limited to Russian state-sponsored activity. They can also help defend against techniques used by other malicious cyber actors.”