Military units, government nerds appear to join the fray, with physical infra in sights

Feature From triggering a water tank overflow in Texas to shutting down Russian state news services on Vladimir Putin's birthday, self-styled hacktivists have been making headlines.

But don't let the Guy Fawkes avatars fool you. Today's "hacktivists," especially those going after critical infrastructure, often have less in common with just the digital vandals of the Nineties and Naughts than with government-backed cyber operators. Threat intel analysts say their tactics, targets, and timing suggest something calculated, and far more connected to nation-state interests.

These are sophisticated groups that are now doing things that are destructive

Earlier this year, operational technology cybersecurity firm Dragos revealed that in April 2024, pro-Ukraine hacktivist crew BlackJack compromised a Moscow municipal organization that maintains the city's communication system for a gas, water, and sewage network. After pwning routers and sensor gateways, the gang deployed OT-specific malware dubbed Fuxnet, which Dragos reckons is ...