The Federal Bureau of Investigation (FBI), together with several partners, including the Romanian Intelligence Service (SRI), disrupted a prolonged cyberattack network targeting sensitive infrastructure in several Western states, president Nicusor Dan said on April 8.<\/p>\n
\u201cCyber actors associated with the GRU, the intelligence service of the Russian army, were collecting military, governmental, and critical infrastructure-related information. Russia is therefore continuing its hybrid war against Western countries, and only those acting in bad faith fail to see this. Romania must improve its cybersecurity and continue to cooperate with its Western partners,\u201d president Dan wrote on Facebook.<\/p>\n
According to a statement from the FBI, a GRU network using compromised routers worldwide to intercept and steal sensitive military, government, and critical infrastructure information was dismantled.<\/p>\n
\u201cAt least since 2024, cyber actors from GRU\u2019s Main Centre for Special Services 85 (85 GTsSS) \u2014 also known as APT28, Fancy Bear, and Forest Blizzard \u2014 have been collecting authentication data and exploiting vulnerable routers globally, including compromising TP-Link routers using CVE-2023-50224,\u201d the statement notes.<\/p>\n