THREATOPS

THREAT OPS › Threat News › The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

lowvolexityPublished 2024-11-22

<p></p> <div style="display: none;"> <section class="mgpb-hero mgpb-hero--detail mgpb-hero--dark-blue mgpb-hero--background-image mgpb-hero--image"> <div class="mgpb-hero__image mgpb-hero__image--background"> <img alt="" class="attachment-16-9-large size-16-9-large" height="1080" src="https://www.volexity.com/wp-content/uploads/2024/11/Volexity-Blog-The-Nearest-N

Attributed threat actors

APT28G0007

MITRE ATT&CK techniques

IP AddressesT1590.005
PowerShellT1059.001
Multi-Factor AuthenticationT1556.006
CredentialsT1589.001
CompressionT1027.015
Wi-Fi NetworksT1669

Indicators of compromise

CVE-2022-38028cve
https://www.justice.gov/opa/pr/us-charges-russian-gru-officers-international-hacking-and-related-influence-andurl
https://blog.netwrix.com/2021/11/30/extracting-password-hashes-from-the-ntds-dit-file/url

Original source: https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/