Brute-Force Attacks Archives

Between June and July 2025, a Ukrainian IP network was the victim of extensive password-spraying and brute-force attacks by cybersecurity researchers against SSL VPN and RDP devices. French cybersecurity firm Intrinsec claims that the activity started with an autonomous system called FDN3 (AS211736) located in Ukraine. We are confident that FDN3 is a component of a larger abusive infrastructure that includes two other Ukrainian networks, VAIZ-AS (AS61432) and ERISHENNYA-ASN (AS210950), as well as an autonomous system TK-NET (AS210848) situated in Seychelles, according to a report released last week. They were all assigned in August 2021, and in order to avoid blocklisting and carry on hosting abusive activities, they frequently trade IPv4 prefixes with one another read more about...

A widespread exploitation effort has targeted Internet service providers (ISPs) in China and the US West Coast, using compromised hosts to install cryptocurrency miners and information thieves. According to the Splunk Threat Research Team, the action also resulted in the delivery of a number of binaries that provide methods for establishing persistence on the systems and assist data exfiltration. In a technical study released last week, the Cisco-owned company claimed that the anonymous threat actors carried out minimal intrusive operations to avoid detection, with the exception of artifacts created by accounts already compromised read more about Over 4000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers. Get up to date on the latest cybersecurity ...

Tag: Brute-Force Attacks

Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices

Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers