The attack involved the exploitation of zero-day vulnerabilities in Zyxel firewalls, with attackers demonstrating the ability to identify companies with vulnerable devices and orchestrate a simultaneous campaign. The breach was conducted through servers associated with the Russian hacker group Sandworm, known for attacks on critical infrastructures

No responses yet