← threat actors
threat actor · not yet in the cluster map
fsb
2 stories · 2 in the wild · July 15, 2026 – July 21, 2026
evidence: 2 observed
sectors
- critical infrastructure 2 · Jul 21
- defense 1 · Jul 21
- government 1 · Jul 21
- energy 1 · Jul 15
geography
- russia 2 · Jul 21
- nato 1 · Jul 21
- ukraine 1 · Jul 21
- european union 1 · Jul 15
- poland 1 · Jul 15
- united kingdom 1 · Jul 15
techniques
- iot compromise 1 · Jul 21
- wiper 1 · Jul 15
attack phases seen
- Collection 1 · Jul 21
- Initial access 1 · Jul 21
- Impact 1 · Jul 15
what we reported, newest first, grouped by story
July 21, 2026
- Russia's FSB is systematically hijacking internet-connected IP cameras across NATO states and Ukraine to surveil military transport routes and weapons shipments bound for Kyiv, per a July 10 advisory from the Netherlands' AIVD and MIVD. The Hacker News.
· Jul 21 · observed · via edge device · Threat Activity & Tradecraft
Jul 13 – July 15, 2026
- The EU and UK issued a coordinated cyber sanctions package — the EU hitting 9 individuals and 4 entities, the UK 24 — tied to Russian intelligence, and jointly attributed the failed December 2025 wiper attack on Poland's power grid to Russia's FSB (earlier coverage). The Register, CERT.dk
· Jul 15 · observed · Policy & Industry