Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns (infosecurity-magazine.com)

• 12-country joint advisory warns of Russian state hackers targeting routers via weak SNMP
• Attackers exploit SNMPv1/v2 plaintext and Cisco Smart Install vulnerability CVE-2018-0171
• UK and EU attribute Poland energy grid attack to FSB Center 16, impose sanctions

"A joint advisory from 12 countries warns that Russian state-backed hackers from FSB Center 16 are actively scanning the internet for routers with weak SNMP credentials. The hackers, also known as Berserk Bear, Energetic Bear, Dragonfly, target sectors including communications, defense, energy, and healthcare. Separately, the UK and EU officially attributed the 2025 cyberattack on Poland's energy grid to the same group and imposed sanctions on 24 individuals and entities."