A new ransomware called Prestige has hit organizations in Poland and Ukraine using a variety of deployment methods.
The Russian government's tolerance and sometime cooperation with the cybercriime groups in the country makes the threat from both factions even more serious, US officials say.
The U.S. has indicted four Russians it alleges are affiliated with the FSB and GRU units responsible for the Triton and Dragonfly attacks against critical infrastructure in the United States and abroad.
The Russian Sandworm threat actor has been deploying a new piece of malware called Cyclops Blink, warns CISA and NSA.
Microsoft said the Actinium threat group (also known as Gamaredon) has been observed targeting government, military and law enforcement organizations in Ukraine with spear-phishing emails.