Russia has spied on the borders of Europe, including Romania. Gru compromised thousands of rooms to track the help sent to Ukraine

Russia has tried to pirate and access the surveillance cameras from several borders, to spy and disrupt the flow of Western aid entering Ukraine, said British intelligence and their allies, according to The Guardian.

A unity of Russian military spy (GRU) is accused of using a number of methods to target organizations that provide “external help”, pirates security rooms at border crossing points, stations and near military facilities in Europe.

The 26165 GRU unit is also accused of sending phishing emails containing fake porn materials and information and obtained passwords to enter systems.

The British services also claim that the unit – also known as “Apt 28” or “Fancy Bear” – has carried out an intentional cyber campaign against public and private organizations in NATO since 2022.

In his consultative note, signed by several countries, the National Cyber ​​Security Center (NCSC) in the United Kingdom – part of the Government Center for Communications (GCHQ) – asked the private companies involved in providing help to “take immediate measures to protect themselves.”

“In addition to the targeting of logistics entities, unit actors 26165 have probably used access to private rooms located in key locations, such as near border crossing, military facilities and gangs, to track the movement of materials to Ukraine,” writes the note.

“The actors also used legitimate municipal services, such as traffic cameras,” according to the same document.

The NCSC also states that about 10,000 rooms have been accessed near “military facilities and stations, to follow the movement of materials to Ukraine.” 80% of these surveillance cameras were in Ukraine and 10% in Romania.

The British institution also claims that 4% of the rooms targeted were in Poland, 2.8% in Hungary and 1.7% in Slovakia. The locations of the other rooms targeted have not been provided. The hacking actions of the Russians offered access to images captured by these cameras, even if it was only photographic catches, according to the same source.

Also, other attempts were made to gather sensitive transport information, such as train schedule and transport documents. “In at least one case, the actors tried to use the voice phishing to obtain access to privileged accounts, claiming that they are members of the IT staff,” writes in the consultative note issued by 10 countries, including the US, France and Germany.

The document adds: “The topics of spearphishing emails were various and ranged from professional themes to adult themes. Phishing emails were frequently sent by compromised accounts or free webmail accounts. The emails were usually written in the target tongue and sent to a single targeted recipient.”

Paul Chichester, the Operational Director of the NCSC, said: “This malicious campaign of Russian military intelligence services is a serious risk for the targeted organizations, including those involved in providing Ukraine assistance.

“The United Kingdom and its partners are committed to sensitizing the public about the tactics used. We strongly encourage organizations to familiarize themselves with threat and attenuation recommendations included in the notice, to defend their” video networks, “Chichester added.

The suggested measures include intensifying the monitoring, the use of multifactorial authentication with strong factors – such as access keys – and ensuring the prompt application of security updates to manage vulnerabilities.

The opinion was developed with agents from US, Germany, Czech Republic, Poland, Australia, Canada, Denmark, Estonia, France and the Netherlands.

This Russian unit within the GRU has been previously accused of disclosing the data of the World Anti -Doping Agency and has played a key role in the 2016 cyber attack on the US National Democrat Committee.

Follow the latest evolutions of the War in Ukraine LiveText on HotNews.ro