Thecyberexpress

Hacktivists Escalate Attacks on Critical Infrastructure in 2025

First seen 22 Jan 2026, 02:59 UTC • Thecyberexpress

•64.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

In 2025, hacktivists evolved their tactics, moving beyond traditional DDoS attacks and website defacements to target critical infrastructure and conduct ransomware attacks. This trend began with Z-Pentest's targeting of industrial control systems in late 2024 and has continued to escalate, according to Cyble's 2025 Threat Landscape report.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

12 entities, 13 inferred relationships (STIX 2.1).

Technique (2)

DDoS
Ransomware

Campaign (1)

Operation Eastwood

Organization (2)

Aeroflot
Education

Affected Platform (5)

BMS
HMI
Industrial Control Systems
IoT
Scada

Tool (2)

VNC
DDoSia Platform

Relationships

DDoS targets BMS
DDoS targets HMI
DDoS targets Industrial Control Systems
DDoS targets IoT
Ransomware targets BMS
Ransomware targets HMI
Ransomware targets Industrial Control Systems
Ransomware targets IoT
Operation Eastwood related to Aeroflot
Operation Eastwood related to Education
Operation Eastwood related to Scada
Operation Eastwood related to VNC
Operation Eastwood related to DDoSia Platform

Continue Reading

Coordinated Russian Disinformation Campaign Targets Ukraine and Europe DDoS Attacks Intensify Despite Decrease in Frequency: Link11 Report Pro-Russia Hacktivists Target UK Critical Services with DoS Attacks 20-Year-Old Arrested for DDoS Attacks on Strategic Websites in Poland U.S. Charges Ukrainian National for Role in Russian Cyberattacks

Hacktivists Escalate Attacks on Critical Infrastructure in 2025

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading