Researchers said attackers linked to Russia’s military intelligence agency have moved from vulnerability exploits to focus on poorly configured network edge devices to keep its access to…

A Google Threat Intelligence Group report notes that Russia in particular has been doing this since the Ukraine war began.

Researchers from the Google-owned firm conclude that Sandworm personas are linked to several recent attacks on critical infrastructure.