APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT Groups Target Construction Industry for RDP, SSH, and Citrix Credentials Advanced Persistent Threat (APT) groups are actively targeting networks within the construction industry to steal remote access credentials, specifically RDP, SSH, and Citrix logins. This campaign poses significant risks to the operational integrity of affected firms, highlighting vulnerabilities in their cybersecurity defenses. 2 sources 47