Netcrook
#Russia
Seven-Year Probe Ends in a Criminal Filing That Maps a Ransomware Economy
U.S. authorities have unsealed an indictment against three Russian nationals, a case that highlights how ransomware, phishing, and malware can sit inside the same criminal pipeline.
Trusted Updates, Untrusted Payloads: ViPNet Becomes the Delivery Path
A reported abuse of ViPNet's update mechanism shows how a normal maintenance channel can turn into a high-value target when trust is the thing under attack.
EU Draws a Line on Turla, Naming Russia’s FSB 16th Centre in a Broader Cyber Warning
The European Union publicly condemned what it called Russia’s “malicious cyber ecosystem” and linked the FSB’s 16th Centre to Turla operations, turning attribution into a political and technical signal.
When a Camera Becomes the Quietest Spy in the War Room
Dutch intelligence has tied a Russian-linked surveillance campaign to internet-connected cameras used to watch military logistics and Ukrainian personnel across Europe.
Routers at the Border: Why Critical Infrastructure’s Quietest Devices Are Now the Loudest Risk
A fresh warning about Russian cyber activity points to a familiar weak spot: poorly secured edge routers that can turn into durable footholds inside sensitive networks.
Brussels Turns a Long Cyber Trail into a Sanctions File
The EU’s latest move does not stop intrusions by itself, but it shows how attribution can be converted into political cost after years of suspected state-linked activity.
Five Charges, One Spoofing Pipeline, and the Fragility of Phone Trust
UK authorities have charged five people after an investigation into Russian Coms, a caller ID spoofing platform linked to more than 1.8 million scam calls.
France Draws a Line to Turla in a Long Game of Invisible Intrusions
A public attribution to the Russia-linked Turla intrusion set points to a campaign built for patience, stealth, and infrastructure abuse, not loud disruption.
Paris Turns a Cyber Claim Into a Diplomatic Warning Shot
France is preparing to summon the Russian ambassador after accusing Moscow of backing cyber activity, a move that highlights how attribution disputes now travel from technical logs to foreign ministries.
EU-UK Sanctions Turn Cyber Attribution Into Policy Pressure
A joint sanctions move against Russian individuals and entities shows how cyber conflict is increasingly being answered with financial and diplomatic restrictions, not just incident response.
Routers at the Edge, Russian Hackers at the Door
U.S. and allied cybersecurity agencies have warned that Russian state hackers are targeting vulnerable and poorly configured routers to reach critical infrastructure networks.
Palencia Arrest Puts Europe’s DDoS Support Layer Under the Microscope
Spanish authorities announced an arrest tied to alleged DDoS-linked activity, and the case points back to a familiar cybercrime pattern: disruptive traffic, loose attribution, and hard-to-verify group branding.
Spain Arrests Man Linked by FBI Tip to Pro-Russian Hacktivist Groups
The case puts a spotlight on how affiliation claims, not just malware, can become part of cybercrime investigations.
Spain’s Arrest Puts Hacktivist Identity Under the Microscope
A single detention tied to CARR and Z-Pentest shows how cyber investigations often begin with attribution questions long before any technical case is public.
Turla’s Quietest Move Yet: Turning Someone Else’s Infrastructure into a Spy Channel
The reported campaign shows how a long-running espionage cluster can make attribution harder by repurposing third-party infrastructure instead of relying on its own.
Cross-Border Arrests Put Pressure on Cyber Cells That Depend on Distance
Spanish police and the FBI arrested an alleged member of Cyber Army of Russia Reborn, a case that highlights how coordinated enforcement can target cyber actors even when the technical details remain thin.
Ukraine’s Media Lines Up on the Cyber Front, and Attackers Know It
A disclosed pair of TV-media intrusions shows why broadcasters sit at the center of wartime espionage, disruption, and trust warfare, even when the technical details stay hidden.
Legacy Forensics: How Phone Extraction Tech Outlives Vendor Cutoffs
A reported iPhone extraction in Russia shows how commercial forensic tools can keep shaping high-risk investigations long after a vendor says it has left a market.
One Unnamed Dairy Plant, One Cyberattack, and a Familiar Industrial Weak Spot
A reported disruption at a dairy products manufacturer in Bashkortostan is a reminder that cyberattacks do not need dramatic leaks or visible destruction to hit real operations.
When a Forensics Box Survives the Ban: Russia, Cellebrite, and the Problem of Installed-Base Power
A reported post-cutoff use of a mobile-extraction tool shows how quickly vendor policy can outrun vendor control once sensitive hardware is already in circulation.