{"id":40664,"date":"2025-11-27T14:40:37","date_gmt":"2025-11-27T12:40:37","guid":{"rendered":"https:\/\/cpd.gov.ua\/?p=40664"},"modified":"2025-11-27T14:41:57","modified_gmt":"2025-11-27T12:41:57","slug":"cyberattacks-against-the-u-s-russian-intelligence-disguises-as-criminal-groups","status":"publish","type":"post","link":"https:\/\/cpd.gov.ua\/en\/international-threats-en\/europe\/cyberattacks-against-the-u-s-russian-intelligence-disguises-as-criminal-groups\/","title":{"rendered":"Cyberattacks against the U.S.: russian intelligence disguises as criminal groups"},"content":{"rendered":"<p>russia is attempting to gain covert access to U.S. urban infrastructure. This was confirmed by a cyberattack on an American engineering company, carried out by russian state actors using RomCom and SocGholish \u2014 intrusion channels typically employed by criminal groups.<\/p>\n<p>\u25ab\ufe0fThe attackers penetrated the company\u2019s systems and obtained data on critical access points and internal processes of contractors working with water supply, transport, and emergency response systems.<\/p>\n<p>\u25ab\ufe0fThe use of SocGholish\u2013RomCom connections blurs the line between cybercrime and russian state operations. The kremlin masks itself as criminal groups to complicate attribution and slow down the response of U.S. intelligence services.<\/p>\n<p>\u25ab\ufe0fThe choice of an engineering company as a target indicates that russia is seeking opportunities to conduct sabotage operations in the U.S. Even failed attacks can provide valuable information on how American defense teams respond.<\/p>\n<p>Each such episode turns U.S. cyberspace into a testing ground where moscow can refine scenarios for future operations against critical infrastructure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>russia is attempting to gain covert access to U.S. urban infrastructure. This was confirmed by a cyberattack on an American engineering company, carried out by russian state actors using RomCom and SocGholish \u2014 intrusion channels typically employed by criminal groups. \u25ab\ufe0fThe attackers penetrated the company\u2019s systems and obtained data on critical access points and internal&#8230;<\/p>\n","protected":false},"author":3,"featured_media":40665,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_kad_post_transparent":"default","_kad_post_title":"default","_kad_post_layout":"default","_kad_post_sidebar_id":"","_kad_post_content_style":"default","_kad_post_vertical_padding":"default","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","wds_primary_category":932,"footnotes":""},"categories":[932],"tags":[],"class_list":["post-40664","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-europe"],"acf":[],"_links":{"self":[{"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/posts\/40664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/comments?post=40664"}],"version-history":[{"count":0,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/posts\/40664\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/media\/40665"}],"wp:attachment":[{"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/media?parent=40664"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/categories?post=40664"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cpd.gov.ua\/en\/wp-json\/wp\/v2\/tags?post=40664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}