Russian Hackers Exploit RDP, VPNs, Supply Chains for Initial Access

Gbhackers •Mayura Kathir • May 22, 2026

Russian state- and aligned threat groups are increasingly combining Remote Desktop Protocol (RDP), Virtual Private Networks (VPNs), supply chain compromise, and sophisticated social engineering to gain initial access to targeted networks across government, critical infrastructure, and commercial sectors. This multi-vector approach allows them to bypass perimeter defenses, blend in with legitimate traffic, and maintain long-term […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Russian Hackers Target Networks via RDP, VPNs, and Supply Chains Russian state-aligned threat groups are increasingly exploiting Remote Desktop Protocol (RDP), Virtual Private Networks (VPNs), and supply chain vulnerabilities to gain initial access to networks across various sectors, including government and critical infrastructure. This multi-vector approach allows attackers to bypass perimeter defenses and blend in with legitimate traffic. They utilize brute-force and credential-stuffing attacks against poorly secured endpoints, often gaining access as legitimate users. Recent campaigns have targeted VPN and edge devices, leveraging unpatched vulnerabilities. Additionally, Russian APT groups are heavily investing in supply chain attacks, delivering malicious documents that exploit zero-day vulnerabilities. Social engineering tactics, such as spear phishing and OAuth abuse, remain prevalent, with attackers tricking users into granting access to sensitive data without entering passwords on suspicious sites. The ongoing operations indicate a significant threat to organizations relying on remote access services. 3 sources 76

Extracted Entities

Russian Hackers Exploit RDP, VPNs, Supply Chains for Initial Access

The full story

Extracted Entities

Attack Types (1)

Industries (1)

MITRE ATT&CK (3)