This threat actor started out being financially-motivated, using extortion to get money from people affected. It has now shifted to be seemingly state-sponsored espionage. Another example of how Russia is shifting its economy, even the crime sector, to support the war effort.
I don’t think that’s a particularly Russian phenomenon, honestly. I’ve seen plenty of stories about FBI turning cybercriminals and their work products into national-security assets. I have no doubt that every Western country with the resources does similar things.
This threat actor started out being financially-motivated, using extortion to get money from people affected. It has now shifted to be seemingly state-sponsored espionage. Another example of how Russia is shifting its economy, even the crime sector, to support the war effort.
I don’t think that’s a particularly Russian phenomenon, honestly. I’ve seen plenty of stories about FBI turning cybercriminals and their work products into national-security assets. I have no doubt that every Western country with the resources does similar things.
Note that this is about an exploit seen in October that has long since been patched.