Opsec Cyber Russia Archives

Category Archives: Russia

Zero-Day Exploit in WinRAR File

August 19 2025 By Bruce Schneier in Exploits, Malware, Russia, Security, Zero-day

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups:

The vulnerability seemed to have super Windows powers. It abused alternate data streams,...
Read more

Aeroflot Hacked

July 29 2025 By Bruce Schneier in Russia, Security

Looks serious.

The Ramifications of Ukraine’s Drone Attack

June 4 2025 By Bruce Schneier in Russia, Security, war

You can read the details of Operation Spiderweb elsewhere. What interests me are the implications for future warfare:

If the Ukrainians could sneak drones so close to major...
Read more

Location Tracking App for Foreigners in Moscow

May 28 2025 By Bruce Schneier in Russia, Security

Russia is proposing a rule that all foreigners in Moscow install a tracking app on their phones.

Using a mobile application that all foreigners will have to install on...
Read more

China, Russia, Iran, and North Korea Intelligence Sharing

March 12 2025 By Bruce Schneier in China, Intelligence, Iran, Russia, Security

Former CISA Director Jen Easterly writes about a new international intelligence sharing co-op:

Historically, China, Russia, Iran & North Korea have cooperated to some extent on military and intelligence...
Read more

Device Code Phishing

February 19 2025 By Bruce Schneier in authentication, Phishing, Russia, Security

This isn’t new, but it’s increasingly popular:

The technique is known as device code phishing. It exploits “device code flow,” a form of authentication formalized in the industry-wide Read more

On the CSRB’s Non-Investigation of the SolarWinds Attack

July 9 2024 By Bruce Schneier in DHS, Microsoft, Russia, Security

ProPublica has a long investigative article on how the Cyber Safety Review Board failed to investigate the SolarWinds attack, and specifically Microsoft’s culpability, even though they were directed by...

Microsoft Executives Hacked

January 29 2024 By Bruce Schneier in Microsoft, Russia, Security

Microsoft is reporting that a Russian intelligence agency—the same one responsible for SolarWinds—accessed the email system of the company’s executives.

Beginning in late November 2023, the threat actor used...
Read more

Cyberattack on Ukraine’s Kyivstar Seems to Be Russian Hacktivists

December 21 2023 By Bruce Schneier in Russia, Security

The Solntsepek group has taken credit for the attack. They’re linked to the Russian military, so it’s unclear whether the attack was government directed or freelance. This is one of...

LitterDrifter USB Worm

November 24 2023 By Bruce Schneier in Malware, Russia, Security

A new worm that spreads via USB sticks is infecting computers in Ukraine and beyond.

The group—known by many names, including Gamaredon, Primitive Bear, ACTINIUM, Armageddon, and Shuckworm—has been...
Read more

[email protected]

Singapore CBD

Category Archives: Russia

Zero-Day Exploit in WinRAR File

Aeroflot Hacked

The Ramifications of Ukraine’s Drone Attack

Location Tracking App for Foreigners in Moscow

China, Russia, Iran, and North Korea Intelligence Sharing

Device Code Phishing

On the CSRB’s Non-Investigation of the SolarWinds Attack

Microsoft Executives Hacked

Cyberattack on Ukraine’s Kyivstar Seems to Be Russian Hacktivists

LitterDrifter USB Worm

Recent Posts

Daniel Miessler on the AI Attack/Defense Balance

Use of Generative AI in Scams

Details of a Scam

Abusing Notion’s AI Agent for Data Theft

Friday Squid Blogging: Jigging for Squid

Recent Comments

Archives

Categories

Meta

Contact Us

[email protected]

Singapore CBD

+65 8714 2780