APT Groups Target Construction Firms to Steal RDP, SSH, and Citrix Credentials

Gbhackers •Mayura Kathir • November 10, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

APT Groups Target Construction Industry for RDP, SSH, and Citrix Credentials Advanced Persistent Threat (APT) groups are actively targeting networks within the construction industry to steal remote access credentials, specifically RDP, SSH, and Citrix logins. This campaign poses significant risks to the operational integrity of affected firms, highlighting vulnerabilities in their cybersecurity defenses. 2 sources 47

Extracted Entities

APT Groups Target Construction Firms to Steal RDP, SSH, and Citrix Credentials

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Industries (1)

Tools (2)