While stalking its target, GruesomeLarch performed credential-stuffing attacks that compromised the passwords of several accounts on a web service platform used by the organization's employees. Two-factor authentication enforced on the platform, however, prevented the attackers from compromising the accounts.

In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.

With a so-called 'Nearest Neighbor Attack,' Russian hackers compromise insecure networks within range of Wi-Fi networks at more valuable targets without ever leaving Russian soil.