Blog Anatomy of a Hacktivist Attack: Russian-Aligned Group Targets OT/ICS
Essential information
- Published
- 10/10/2025 16:56
- Modified
- 10/10/2025 17:05
- Tags
- 2025-10-10 defacement exploit hacktivist human-machine interface megamedusa modbus overflame raas ransomware russian twonet
- Related entities
- 10 observables, 1 intrusion sets (apt), 7 techniques (mitre), 1 malware, 1 others
Description
Forescout honeypot caught hacktivist activity targeting a decoy water treatment plant in Sept. 2025. A Russian-aligned group, TwoNet, claimed responsibility for the attack. The group logged into the human-machine interface (HMI) for: defacement, process disruption, manipulation, and evasion.