Ukraine warns Russian hackers are revisiting past breaches to prepare new attacks

Russian hackers are increasingly attempting to regain access to computer systems they previously compromised, Ukraine’s cyber incident response team (CERT-UA) said, warning that earlier breaches are often being used as footholds for follow-up operations.

In a new report, CERT-UA said attackers are revisiting previously breached infrastructure to check whether access is still available, whether exploited vulnerabilities have been patched and whether previously obtained credentials remain valid.

“Unfortunately, these attempts sometimes succeed if the root cause of the initial incident has not been completely eliminated,” the researchers said.

Read more at The Record