Russian spies invent "nearest neighbor attack" to compromise networks from a distance
Russian spies invent "nearest neighbor attack" to compromise networks from a distance
Hackers working for Russian intelligence known as APT28 aka Fancy Bear have invented a new method of compromising target networks known as the nearest neighbor attack. Security researchers at Volexity expect this technique to gain popularity the future.
First, hackers compromise a device on a network that is physically close to their intended target with both WiFi and wired connections (dual home device). Next, they use the compromised device to move laterally onto the neighboring target WiFi network.
The Russian spy hackers actually formed a "daisy chain," hopping across 3 different networks before finally infiltrating their target. From there, it was as "simple" as accessing the target with Remote Desktop Protocol from an unprivileged account. This evolution of close access attacks makes it easier for hackers to avoid getting caught (physically) by allowing them to launch attacks at far greater distance.
